CVE-2019-1907— Cisco UCS C-Series、Cisco UCS S-Series Integrated Management Controller Software 授权问题漏洞
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2019-1907の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability
ソース: NVD (National Vulnerability Database)
脆弱性説明
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to set sensitive configuration values and gain elevated privileges. The vulnerability is due to improper handling of substring comparison operations that are performed by the affected software. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker with read-only privileges to gain administrator privileges.
ソース: NVD (National Vulnerability Database)
CVSS情報
N/A
ソース: NVD (National Vulnerability Database)
脆弱性タイプ
授权机制不恰当
ソース: NVD (National Vulnerability Database)
脆弱性タイトル
Cisco UCS C-Series、Cisco UCS S-Series Integrated Management Controller Software 授权问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Cisco UCS C-Series和Cisco UCS S-Series都是美国思科（Cisco）公司的产品。Cisco UCS C-Series是一款C系列机架式服务器。Cisco UCS S-Series是一款S系列机架式服务器。Integrated Management Controller（IMC）Software是一套用于对UCS（统一计算系统）进行管理的软件。该软件支持HTTP、SSH访问等，并可对服务器进行开机、关机和重启等操作。 Cisco UCS C-Series和S-Series S
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Cisco | Cisco Unified Computing System (Management Software) | unspecified ~ 4.0(2f) | - |
II. CVE-2019-1907の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2019-1907のインテリジェンス情報
请登录查看更多情报信息。
CVE-2019-1907 厂商安全公告 (1)
- 🔗 Cisco Integrated Management Controller Substring Comparison Privilege Escalation Vulnerability 記事全文を読む vendor-advisoryx_refsource_CISCO
Same Patch Batch · Cisco · 2019-08-21 · 27 CVEs total
| CVE-2019-1864 | Cisco Integrated Management Controller Command Injection Vulnerability | |
| CVE-2019-12623 | Cisco Enterprise Network Functions Virtualization Infrastructure Software File Enumeration | |
| CVE-2019-12622 | Cisco RoomOS Software Privilege Escalation Vulnerability | |
| CVE-2019-12621 | Cisco HyperFlex Static SSL Key Vulnerability | |
| CVE-2019-12634 | Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Direc | |
| CVE-2019-12627 | Cisco Firepower Threat Defense Software Information Disclosure Vulnerability | |
| CVE-2019-12626 | Cisco Unified Contact Center Express Stored Cross-Site Scripting Vulnerability | |
| CVE-2019-12624 | Cisco IOS XE NGWC Legacy Wireless Device Manager GUI Cross-Site Request Forgery Vulnerabil | |
| CVE-2019-1850 | Cisco Integrated Management Controller Command Injection Vulnerability | |
| CVE-2019-1839 | Cisco Remote PHY Device Software Command Injection Vulnerability | |
| CVE-2019-1634 | Cisco Integrated Management Controller Command Injection Vulnerability | |
| CVE-2019-1871 | Cisco Integrated Management Controller Buffer Overflow Vulnerability | |
| CVE-2019-1865 | Cisco Integrated Management Controller Command Injection Vulnerability | |
| CVE-2019-1938 | Cisco UCS Director and Cisco UCS Director Express for Big Data API Authentication Bypass V | |
| CVE-2019-1863 | Cisco Integrated Management Controller Privilege Escalation Vulnerability | |
| CVE-2019-1900 | Cisco Integrated Management Controller Unauthenticated Denial of Service Vulnerability | |
| CVE-2019-1896 | Cisco Integrated Management Controller CSR Generation Command Injection Vulnerability | |
| CVE-2019-1885 | Cisco Integrated Management Controller Command Injection Vulnerability | |
| CVE-2019-1883 | Cisco Integrated Management Controller CLI Command Injection Vulnerability | |
| CVE-2019-1937 | Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Direc |
Showing 20 of 27 CVEs. View all on vendor page →
IV. 関連脆弱性
- CVE-2020-3242
Cisco UCS Director Information Disclosure Vulnerability - CVE-2020-3241
Cisco UCS Director Path Traversal Vulnerability - CVE-2019-1908
Cisco Integrated Management Controller Information Disclosur - CVE-2019-1885
Cisco Integrated Management Controller Command Injection Vul - CVE-2019-1900
Cisco Integrated Management Controller Unauthenticated Denia
同じベンダー: Cisco
- CVE-2026-20243
ClamAV ALZ Archive Processing Denial of Service Vulnerabilit - CVE-2026-20244
ClamAV DMG File Processing Denial of Service Vulnerability - CVE-2026-20215
ClamAV 7Zip File Format Processing Out-of-Bounds Memory Corr - CVE-2026-20217
ClamAV PESpin File Format Processing Out-of-Bounds Memory Co - CVE-2026-20216
ClamAV InstallShield File Format Processing Resource Exhaust
同じ弱点: CWE-285
- CVE-2026-15594
waooAI waoowaoo Media hash.ts stablePublicIdFromStorageKey i - CVE-2026-15510
Leantime API saveSetting improper authorization - CVE-2026-15509
Leantime JSON-RPC Endpoint addUser improper authorization - CVE-2026-56313
Capgo - Cross-Organization Account Disruption via SSO Prelin - CVE-2026-56241
Capgo - RBAC Demotion Privilege Retention via Stale org_user
V. CVE-2019-1907へのコメント
まだコメントはありません