CVE-2019-1630
lowpriority · track · 22EPSS 0.003 · 28 %ileEURUUSEPSS · scored 2026-10-27
A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedCisco Unified Computing System (Management Software)cisco_csaf
Cisco has released software updates that address this vulnerability.
https://software.cisco.com
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–5.5
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (6)
Products and version ranges known to be affected.
- cisco integrated management controllerall versionsnvdUScpe:2.3:a:cisco:integrated_management_controller:*:*:*:*:*:*:*:*
- cisco unified computing system= 4.0(1c)hs3nvdUScpe:2.3:a:cisco:unified_computing_system:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- cisco-sa-20190619-imc-frmwr-dosCisco Integrated Management Controller Denial of Service Vulnerability2019-06-19csaf · cisco_csafUS
A vulnerability in the firmware signature checking program of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition. The vulnerability is due to insufficient checking of an input buffer. An attacker could exploit this vulnerability by passing a crafted file to the affected system. A successful exploit could inhibit an administrator's ability to access the system. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-frmwr-dos ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-frmwr-dos"]
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (15)
External citations — patches, advisories, analysis.
- http://www.cisco.com/cnnvd
- https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvo36079Patchcnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2019-1630cnnvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-cimc-cli-cmdinjcnnvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-csrfcnnvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-doscnnvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewritecnnvd
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-frmwr-doscnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan