CVE-2019-1871 Cisco Integrated Management Controller Buffer Overflow Vulnerability
Authenticated attackers can trigger a buffer overflow in Cisco IMC to execute arbitrary code with root privileges or cause denial of service.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-1871?
CVE-2019-1871 is a high-severity memory corruption vulnerability in Cisco Unified Computing System, published on 21 Aug 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability in the Import Cisco IMC configuration utility of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to cause a denial of service (DoS) condition and implement arbitrary commands with root privileges on an affected device. The vulnerability is due to improper bounds checking by the import-config process. An attacker could exploit this vulnerability by sending malicious packets to an affected device. When the packets are processed, an exploitable buffer overflow condition may occur. A successful exploit could allow the attacker to implement arbitrary code on the affected device with elevated privileges.
Weakness: CWE-119
Which versions are affected by CVE-2019-1871?
It affects 2 products.
Products include Cisco Integrated Management Controller Supervisor, Cisco Unified Computing System.
How do I fix CVE-2019-1871?
No fix has been published for CVE-2019-1871 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2019-1871 being exploited?
There is no known exploitation of CVE-2019-1871 in the wild and no public exploit code.
Other vulnerabilities in Cisco Unified Computing System
- CVE-2019-1935 Hardcoded credentials in Cisco Unified Computing System Director
- CVE-2019-1937 Auth bypass in Cisco Unified Computing System Director
- CVE-2019-1974 Auth bypass in Cisco Unified Computing System Director
- CVE-2015-6259 Path traversal in n/a
- CVE-2019-1864 Cisco Integrated Management Controller Command Injection Vulnerability
Sources
Also known as GHSA-cwvm-xp47-2xwf.