cisco integrated-management-controller CVE-2019-1630 vulnerability in Cisco Products
Published on June 20, 2019

Cisco Integrated Management Controller Denial of Service Vulnerability
A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system.

Vendor Advisory NVD

Weakness Type

What is a Buffer Overflow Vulnerability?

The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

CVE-2019-1630 has been classified to as a Buffer Overflow vulnerability or weakness.


Products Associated with CVE-2019-1630

stack.watch emails you whenever new vulnerabilities are published in Cisco Integrated Management Controller or Cisco Unified Computing System. Just hit a watch button to start following.

 
 

Affected Versions

Cisco Unified Computing System (Management Software) Version 4.0 is affected by CVE-2019-1630

Exploit Probability

EPSS
0.07%
Percentile
21.48%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.