CVE-2019-1629

A vulnerability in the configuration import utility of Cisco Integrated Management Controller (IMC) could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attacker could exploit this vulnerability by crafting a malicious file and uploading it to the affected device. An exploit could allow the attacker to fill up the filesystem or upload malicious scripts.

• CWE-306
• CWE-306

• http://www.securityfocus.com/bid/108852Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewriteVendor Advisory
• http://www.securityfocus.com/bid/108852Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-imc-filewriteVendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16284A potential security vulnerability has been identified in mu…7.2
• CVE-2019-16285If a local user has been configured and logged in, an unauth…4.6
• CVE-2019-16286An attacker may be able to bypass the OS application filter …6.8
• CVE-2019-16287In HP ThinPro Linux 6.2, 6.2.1, 7.0 and 7.1, an attacker may…6.8
• CVE-2019-16288On Tenda N301 wireless routers, a long string in the wifiSSI…7.5
• CVE-2019-16289The insert-php (aka Woody ad snippets) plugin before 2.2.8 f…5.4
• CVE-2019-16293The Create Discoveries feature of Open-AudIT before 3.2.0 al…8.8
• CVE-2019-16294SciLexer.dll in Scintilla in Notepad++ (x64) before 7.7 allo…7.8
• CVE-2019-16295Stored XSS in filemanager2.php in CentOS-WebPanel.com (aka C…4.6
• CVE-2019-16297An issue was discovered in Open Network Operating System (ON…7.5
• CVE-2019-16298An issue was discovered in Open Network Operating System (ON…7.5
• CVE-2019-16299An issue was discovered in Open Network Operating System (ON…7.5