A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to inject arbitrary commands and obtain root privileges. The vulnerability is due to insufficient validation of user-supplied input in the Certificate S...
CVE-2019-1900PUBLISHED: 2019-08-21A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient validation of user-s...
CVE-2019-1907PUBLISHED: 2019-08-21A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration values and gain elevated privileges. The vulnerability is due to improper handling of substring comparison operations that are performed by t...
CVE-2019-1908PUBLISHED: 2019-08-21A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to insufficient security restrictions imposed by the a...
CVE-2019-1935PUBLISHED: 2019-08-21A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco ..
Support the originator by clicking the read the rest link below.
