Skip to content
OpenAdvisories
Medium · 5.5 CVE-2019-1628 EUVD-2019-10185GHSA-m8rm-64r5-m864

Cisco Integrated Management Controller Denial of Service Vulnerability

Published Jun 20, 2019 · Updated Nov 21, 2024 · Assigned by cisco

Description

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checking. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. An exploit could allow the attacker to cause a buffer overflow, resulting in a process crash and DoS condition on the device.

Affected products

VendorProductAffectedFixed
Cisco Cisco Unified Computing System (Management Software) unspecified – < 4.0(4b) 4.0(4b)

References