PT-2019-3234 · Cisco · Cisco Ucs Director+2

Pedro Ribeiro · Published 2019-08-21 · Updated 2023-03-03 · CVE-2019-1936

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller (IMC) Supervisor versions (affected versions not specified) Cisco UCS Director versions (affected versions not specified) Cisco UCS Director Express for Big Data versions (affected versions not specified)

Description A vulnerability in the web-based management interface could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux shell as the root user. This issue is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this by logging in with administrator privileges and sending a malicious request to a certain part of the interface.

Recommendations For Cisco Integrated Management Controller (IMC) Supervisor, consider restricting access to the web-based management interface until a fix is available. For Cisco UCS Director, restrict administrator privileges to minimize the risk of exploitation. For Cisco UCS Director Express for Big Data, avoid using the web-based management interface with administrator privileges until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2019-03224

CVE-2019-1936

Affected Products

Cisco Integrated Management Controller (Imc) Supervisor

Cisco Ucs Director

Cisco Ucs Director Express For Big Data

References · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/cisco_ucs_rce.rb · Exploit
• 🔥 http://packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/154308/Cisco-UCS-Director-Unauthenticated-Remote-Code-Execution.html · Exploit
• 🔥 https://seclists.org/bugtraq/2019/Aug/49 · Exploit
• https://osv.dev/vulnerability/CVE-2019-1936 · Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-ucs-cmdinj · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-03224 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-1936 · Security Note
• http://seclists.org/fulldisclosure/2019/Aug/36 · Note