cisco-sa-20190619-imc-filewrite: Cisco Integrated Management Controller Arbitrary File Write Vulnerability
A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the affected device. An exploit could allow the attacker to fill up the filesystem or upload malicious scripts. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewrite
Affected Software
Event History
Frequently Asked Questions
What is the severity of cisco-sa-20190619-imc-filewrite?
The severity of cisco-sa-20190619-imc-filewrite is classified as critical due to its potential for unauthenticated remote access and data upload capabilities.
How do I fix cisco-sa-20190619-imc-filewrite?
To fix cisco-sa-20190619-imc-filewrite, apply the recommended security patches from Cisco's advisory.
What systems are affected by cisco-sa-20190619-imc-filewrite?
The systems affected by cisco-sa-20190619-imc-filewrite include Cisco Integrated Management Controllers.
What actions can an attacker perform due to cisco-sa-20190619-imc-filewrite?
An attacker exploiting cisco-sa-20190619-imc-filewrite can upload arbitrary data to the filesystem, leading to potential data corruption or compromise.
Is authentication required to exploit cisco-sa-20190619-imc-filewrite?
No, authentication is not required to exploit cisco-sa-20190619-imc-filewrite, making it particularly dangerous.