CVE-2019-1630: Cisco Integrated Management Controller Denial of Service Vulnerability
First published: Thu Jun 20 2019(Updated: )
A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Integrated Management Controller | ||
| Cisco Unified Computing System | =4.0\(1c\)hs3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this firmware signature checking program vulnerability?
The vulnerability ID of this firmware signature checking program vulnerability is CVE-2019-1630.
What is the severity rating of CVE-2019-1630?
The severity rating of CVE-2019-1630 is medium with a value of 5.5.
How does this vulnerability affect Cisco Integrated Management Controller (IMC)?
This vulnerability affects Cisco Integrated Management Controller (IMC) when an authenticated, local attacker exploits it.
What is the impact of CVE-2019-1630?
The impact of CVE-2019-1630 is a denial of service (DoS) condition caused by a buffer overflow.
Are there any references available for CVE-2019-1630?
Yes, you can find more information about CVE-2019-1630 at the following references: - http://www.securityfocus.com/bid/108846 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-frmwr-dos
- collector/nvd-index
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/title
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco integrated management controller
- canonical/cisco unified computing system
- version/cisco unified computing system/4.0\(1c\)hs3