CVE-2019-1629: Cisco Integrated Management Controller Arbitrary File Write Vulnerability
A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the affected device. An exploit could allow the attacker to fill up the filesystem or upload malicious scripts.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2019-1629.
What is the severity rating of CVE-2019-1629?
CVE-2019-1629 has a severity rating of 5.3, which is considered medium.
What is the affected software for CVE-2019-1629?
The affected software for CVE-2019-1629 is Cisco Integrated Management Controller and Cisco Unified Computing System version 4.0(1c)hs3.
What is the impact of CVE-2019-1629?
CVE-2019-1629 allows an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem.
Are there any security advisories or references for CVE-2019-1629?
Yes, there are security advisories and references available for CVE-2019-1629. You can refer to the following links for more information: [http://www.securityfocus.com/bid/108852](http://www.securityfocus.com/bid/108852) and [https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewrite](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewrite).