CVE-2019-1630CWE-119

Cisco Integrated Management Controller Denial of Service Vulnerability

Medium · published June 20, 2019

CVSS v3.0
5.5
EPSS
0%
Percentile
27.0
In the wild
Unconfirmed
What it is

A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system.

The record
Technical detail
CVSS v3.0
5.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00347 · 27.0th percentile
Weakness
CWE-119 · Improper Restriction of Operations within the Bounds of a Memory Buffer
Published
2019-06-20T02:50Z
EPSS history
Timeline
  • 20 JUN 02:50Z
    Cisco Integrated Management Controller Denial of Service Vulnerability
    cvelistv5