Vulnerabilities > Cisco > Unified Computing System > 4.0.1c.hs3

DATE CVE VULNERABILITY TITLE RISK
2019-06-20 CVE-2019-1629 Missing Authentication for Critical Function vulnerability in Cisco products
A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem.
network
low complexity
cisco CWE-306
5.0
2019-06-20 CVE-2019-1628 Integer Underflow (Wrap or Wraparound) vulnerability in Cisco products
A vulnerability in the web server of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to cause a buffer overflow, resulting in a denial of service (DoS) condition on an affected device.
local
low complexity
cisco CWE-191
2.1
2019-06-20 CVE-2019-1627 Information Exposure vulnerability in Cisco products
A vulnerability in the Server Utilities of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to gain unauthorized access to sensitive user information from the configuration data that is stored on the affected system.
network
low complexity
cisco CWE-200
4.0