VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 21, 2019· Updated Jun 17, 2026

CVE-2019-12634

CVE-2019-12634

Description

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a missing authentication check in an API call. An attacker who can send a request to an affected system could cause all currently authenticated users to be logged off. Repeated exploitation could cause the inability to maintain a session in the web-based management portal.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Cisco Systems, Inc./Integrated Management Controller Supervisor2 versions
    cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*range: >=2.2.0.3,<=2.2.0.6
    • (no CPE)
  • Cisco Systems, Inc./Ucs Director4 versions
    cpe:2.3:a:cisco:ucs_director:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:cisco:ucs_director:*:*:*:*:*:*:*:*range: >=6.7.0.0,<=6.7.2.0
    • cpe:2.3:a:cisco:ucs_director:6.6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:ucs_director:6.6.1.0:*:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Ucs Director Express For Big Data4 versions
    cpe:2.3:a:cisco:ucs_director_express_for_big_data:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:cisco:ucs_director_express_for_big_data:*:*:*:*:*:*:*:*range: >=3.7.0.0,<=3.7.2.0
    • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.1.0:*:*:*:*:*:*:*
    • (no CPE)
  • Cisco Systems, Inc./Unified Computing System Directorcpe-rescue
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.