CVE-2019-1628: cisco cisco unified computing system (management software) Integer Underflow (Wrap or Wraparound)

Vulnerability summary

CVE-2019-1628 is a medium (CVSS 5.5) Integer Underflow (Wrap or Wraparound) vulnerability in cisco cisco unified computing system (management software). EPSS estimates a 0.39% chance of exploitation in the next 30 days, higher than 31% of scored vulnerabilities.

Timeline

1. 20-06-2019
   PublishedVulnerability first disclosed.
2. 21-11-2024
   Last modifiedVulnerability information updated.

Description

A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected device. The vulnerability is due to incorrect bounds checking. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected system. An exploit could allow the attacker to cause a buffer overflow, resulting in a process crash and DoS condition on the device.

• CWE-191Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.