CVE detail

CVE-2019-1900 — CVE-2019-1900

Published 2019-08-21 · Modified 2026-06-17 · Vendor cisco · Product unified_computing_system · Source nvd

HIGH

severity

CVSS-derived band

7.5

CVSS v3

0–10 scale

0.0190

EPSS probability

exploitation probability, 30d

78.0%

EPSS percentile

percentile vs all CVEs

NOT LISTED

CISA KEV

known exploited catalog

Description

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to cause the web server process to crash, causing a denial of service (DoS) condition on an affected system. The vulnerability is due to insufficient validation of user-supplied input on the web interface. An attacker could exploit this vulnerability by submitting a crafted HTTP request to certain endpoints of the affected software. A successful exploit could allow an attacker to cause the web server to crash. Physical access to the device may be required for a restart.

Remediation

Product	Vulnerable range	Fixed version	Advisory
Cisco Cisco Unified Computing System (Management Software)	>=unspecified<4.0(2f)	4.0(2f)	advisory ↗

References

cvedb.io · NVD · CISA KEV · FIRST EPSS · vendor advisories (CVE Program List v5). Informational only, no warranty — verify every remediation against the vendor advisory before acting on it. This product uses data from the NVD API but is not endorsed or certified by the NVD, CISA, FIRST.org or any vendor named. CVE® is a registered trademark of The MITRE Corporation.