5.5
Medium
CVE-2019-1630 A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow…
Description
A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Cisco Unified Computing System (Management Software) | 4.0 | No fix stated |
References
- 20190619 Cisco Integrated Management Controller Denial of Service Vulnerability tools.cisco.com
- 108846 www.securityfocus.com
Timeline
- Published
- Last modified
Other CVEs of Cisco Unified Computing System (Management Software)
The 14 CVEs of Cisco Unified Computing System (Management Software) →
CVE-2020-3242
A vulnerability in the REST API of Cisco UCS Director could allow an authenticated, remote attacker with…
4.9
Medium
CVE-2020-3241
A vulnerability in the orchestration tasks of Cisco UCS Director could allow an authenticated, remote attacker to…
6.5
Medium
CVE-2019-1907
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote…
8.8
High
CVE-2019-1908
A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management…
7.5
High