CVE-2019-1857 Cisco HyperFlex HX-Series Web-Based Management Interface Cross-Site Request Forgery Vulnerability
Unauthenticated attackers can perform arbitrary actions on Cisco HyperFlex systems by tricking users into clicking crafted links via CSRF.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2019-1857?
CVE-2019-1857 is a medium-severity vulnerability in Cisco HyperFlex HX-Series, published on 3 May 2019. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
A vulnerability in the web-based management interface of Cisco HyperFlex HX-Series could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected system. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected software. An attacker could exploit this vulnerability by persuading a user of the interface to follow a crafted link. A successful exploit could allow the attacker to perform arbitrary actions on an affected system by using a web browser and with the privileges of the user.
Weakness: CWE-352
Which versions are affected by CVE-2019-1857?
It affects 14 products.
Products include Cisco Hx220c Af M5 Firmware, Cisco Hx220c All Nvme M5 Firmware, Cisco Hx220c Edge M5 Firmware, Cisco Hx220c M5 Firmware, Cisco Hx240c Af M5 Firmware, Cisco Hx240c Large Form Factor Firmware and 8 more.
How do I fix CVE-2019-1857?
No fix has been published for CVE-2019-1857 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-1857 being exploited?
There is no known exploitation of CVE-2019-1857 in the wild and no public exploit code.
Sources
Also known as GHSA-8grm-7ff2-5xjr.