PT-2019-3073 · Cisco · Cisco Integrated Management Controller
Publicado
2019-08-21
·
Atualizado
2019-10-09
·
CVE-2019-1871
CVSS v2.0
9.0
Alta
| Vetor | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco Integrated Management Controller (IMC) (affected versions not specified)
Description
The issue is caused by a buffer overflow in the memory due to improper bounds checking by the import-config process. This could allow a remote attacker to execute arbitrary commands with root privileges or cause a denial of service condition. The attacker could exploit this by sending malicious packets to an affected device, potentially leading to an exploitable buffer overflow condition. A successful exploit could allow the attacker to implement arbitrary code on the affected device with elevated privileges.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Cisco Integrated Management Controller