VDB
CVE-2019-1632
CVE-2019-1632
PUBLISHED
CVSS 4.599999904632568 MEDIUM
A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack and perform arbitrary actions on an affected device. The vulnerability is due to insufficient CSRF protections for the web-based management interface of the affected device. An attacker could exploit this vulnerability by persuading a user to follow a malicious link. A successful exploit could allow the attacker to use a web browser and the privileges of the user to perform arbitrary actions on the affected device.
EPSS 0.08% · 22.9th percentile
Risk Scores
CVSS 3.0
4.599999904632568
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
EPSS Score
0.08%
22.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | integrated_management_controller | |
| cisco | unified_computing_system | 4.0\(1c\)hs3 |
| Cisco | Cisco Unified Computing System (Management Software) | 4.0 |
Exploit Intelligence
Timeline
- Jun 19, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score