What’s Vulnerable › Vulnerabilities

CVE-2019-1629: Cisco Integrated Management Controller Arbitrary File Write Vulnerability

• Severity: medium (CVSS 5.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-20 · updated 2026-06-17
• Weakness: CWE-306

Description

A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the affected device. An exploit could allow the attacker to fill up the filesystem or upload malicious scripts.

Affected products

• Cisco Integrated Management Controller (IMC) Supervisor: all versions
• Cisco Unified Computing System (Managed): 4.0(1c)hs3

References

• http://www.securityfocus.com/bid/108852
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewrite
• http://www.securityfocus.com/bid/108852
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewrite

Get alerted when CVE-2019-1629 or the next vulnerability affects your stack