CVE-2019-1628CWE-191

Cisco Integrated Management Controller Denial of Service Vulnerability

Medium · published June 20, 2019

CVSS v3.0
5.5
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checking. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. An exploit could allow the attacker to cause a buffer overflow, resulting in a process crash and DoS condition on the device.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00385 · 31.3th percentile
Weakness
CWE-191 · Integer Underflow (Wrap or Wraparound)
Published
2019-06-20T02:50Z
EPSS history
Timeline
  • 20 JUN 02:50Z
    Cisco Integrated Management Controller Denial of Service Vulnerability
    cvelistv5