Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2019-1908 | First vendor Publication | 2019-08-21 |
| Vendor | Cve | Last vendor Modification | 2020-10-16 |
Security-Database Scoring CVSS v3
| Cvss vector : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | |||
|---|---|---|---|
| Overall CVSS Score | 7.5 | ||
| Base Score | 7.5 | Environmental Score | 7.5 |
| impact SubScore | 3.6 | Temporal Score | 7.5 |
| Exploitabality Sub Score | 3.9 | ||
| Attack Vector | Network | Attack Complexity | Low |
| Privileges Required | None | User Interaction | None |
| Scope | Unchanged | Confidentiality Impact | High |
| Integrity Impact | None | Availability Impact | None |
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:P/I:N/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| A vulnerability in the Intelligent Platform Management Interface (IPMI) implementation of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to view sensitive system information. The vulnerability is due to insufficient security restrictions imposed by the affected software. A successful exploit could allow the attacker to view sensitive information that belongs to other users. The attacker could then use this information to conduct additional attacks. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-1908 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 1 |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | multiple vendors IPMI RAKP username brute force attempt RuleID : 27240 - Revision : 7 - Type : SERVER-OTHER |
| 2014-01-10 | IPMI default username - USERID RuleID : 27239 - Revision : 5 - Type : SERVER-OTHER |
| 2014-01-10 | IPMI default username - admin RuleID : 27238 - Revision : 5 - Type : SERVER-OTHER |
| 2014-01-10 | IPMI default username - root RuleID : 27237 - Revision : 5 - Type : SERVER-OTHER |
Sources (Detail)
| Source | Url |
|---|---|
| CISCO | https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
Alert History
| Date | Informations |
|---|---|
| 2021-05-04 13:32:21 |
|
| 2021-04-22 02:46:30 |
|
| 2020-10-16 21:23:02 |
|
| 2020-05-23 02:28:05 |
|
| 2019-10-10 05:21:03 |
|
| 2019-08-31 05:19:09 |
|
| 2019-08-22 00:19:53 |
|
