CVE-2019-1937
Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data Authentication Bypass Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to acquire a valid session token with administrator privileges, bypassing user authentication. The vulnerability is due to insufficient request header validation during the authentication process. An attacker could exploit this vulnerability by sending a series of malicious requests to an affected device. An exploit could allow the attacker to use the acquired session token to gain full administrator access to the affected device.
Una vulnerabilidad en la interfaz de administración basada en la web de Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director y Cisco UCS Director Express para Big Data podría permitir que un atacante remoto no autenticado adquiera un token de sesión válido con privilegios de administrador, evitando al usuario autenticación. La vulnerabilidad se debe a una validación insuficiente del encabezado de la solicitud durante el proceso de autenticación. Un atacante podría aprovechar esta vulnerabilidad enviando una serie de solicitudes maliciosas a un dispositivo afectado. Un exploit podría permitir al atacante usar el token de sesión adquirido para obtener acceso completo del administrador al dispositivo afectado.
Cisco UCS Director, Cisco Integrated Management Controller Supervisor and Cisco UCS Director Express for Big Data suffer from default password, authentication bypass, and command injection vulnerabilities.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2018-12-06 CVE Reserved
- 2019-08-21 CVE Published
- 2023-07-15 First Exploit
- 2024-09-16 CVE Updated
- 2024-10-25 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-287: Improper Authentication
CAPEC
References (7)
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/51589 | 2023-07-15 | |
| http://packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.html | 2024-09-16 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Integrated Management Controller Supervisor Search vendor "Cisco" for product "Integrated Management Controller Supervisor" | >= 2.2.0.3 <= 2.2.0.6 Search vendor "Cisco" for product "Integrated Management Controller Supervisor" and version " >= 2.2.0.3 <= 2.2.0.6" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ucs Director Search vendor "Cisco" for product "Ucs Director" | >= 6.6.0.0 <= 6.6.1.0 Search vendor "Cisco" for product "Ucs Director" and version " >= 6.6.0.0 <= 6.6.1.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ucs Director Search vendor "Cisco" for product "Ucs Director" | >= 6.7.0.0 <= 6.7.1.0 Search vendor "Cisco" for product "Ucs Director" and version " >= 6.7.0.0 <= 6.7.1.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ucs Director Search vendor "Cisco" for product "Ucs Director" | 6.7\(0.0.67265\) Search vendor "Cisco" for product "Ucs Director" and version "6.7\(0.0.67265\)" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ucs Director Express For Big Data Search vendor "Cisco" for product "Ucs Director Express For Big Data" | >= 3.7.0.0 <= 3.7.1.0 Search vendor "Cisco" for product "Ucs Director Express For Big Data" and version " >= 3.7.0.0 <= 3.7.1.0" | - |
Affected
| ||||||
| Cisco Search vendor "Cisco" | Ucs Director Express For Big Data Search vendor "Cisco" for product "Ucs Director Express For Big Data" | 3.6.0.0 Search vendor "Cisco" for product "Ucs Director Express For Big Data" and version "3.6.0.0" | - |
Affected
| ||||||