← Back

CVE-2019-1908

nvd nist
Published: Aug 21, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to insufficient security restrictions imposed by the affected software. A successful exploit could allow the attacker to view sensitive information that belongs to other users. The attacker could then use this information to conduct additional attacks.

Affected (5)

Cisco
2 products
Unified Computing System
Integrated Management Controller Supervisor
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Unified Computing System
Version 4.0(1c)hs3
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Integrated Management Controller Supervisor
From 2.0.0.0 to 2.0\(13o\)
Integrated Management Controller Supervisor
From 3.0.0.0 to 3.0\(4k\)
Integrated Management Controller Supervisor
From 4.0.0.0 to 4.0\(4b\)
Configuration C
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
Integrated Management Controller Supervisor
From 4.0.0.0 to 4.0\(2f\)
Running on/withPlatform Versions
Cisco
Ucs C125 M5
All versions
Cisco
Ucs C4200
All versions
Cisco
Ucs S3260
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

Source: psirt@cisco.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.