CVE-2019-1879

A vulnerability in the CLI of Cisco Integrated Management Controller (IMC) could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The vulnerability is due to insufficient validation of user-supplied input at the CLI. An attacker could exploit this vulnerability by authenticating with the administrator password via the CLI of an affected device and submitting crafted input to the affected commands. A successful exploit could allow the attacker to execute arbitrary commands on the device with root privileges.

• CWE-78
• CWE-78

• http://www.securityfocus.com/bid/108850Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-cimc-cli-cmdinjVendor Advisory
• http://www.securityfocus.com/bid/108850Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-cimc-cli-cmdinjVendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-18780An arbitrary command injection vulnerability in the Cluster …9.8
• CVE-2019-18781An open redirect vulnerability was discovered in Zoho Manage…6.1
• CVE-2019-18782SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 …5.3
• CVE-2019-18784SuiteCRM 7.10.x versions prior to 7.10.21 and 7.11.x version…9.8
• CVE-2019-18785SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 …7.5
• CVE-2019-18786In the Linux kernel through 5.3.8, f->fmt.sdr.reserved is un…5.5
• CVE-2019-18790An issue was discovered in channels/chan_sip.c in Sangoma As…6.5
• CVE-2019-18791Lexmark printer MS812 and multiple older generation Lexmark …5.4
• CVE-2019-18792An issue was discovered in Suricata 5.0.0. It is possible to…9.1
• CVE-2019-18793Parallels Plesk Panel 9.5 allows XSS in target/locales/tr-TR…6.1
• CVE-2019-18794The BASS Audio Library 2.4.14 under Windows is prone to a BA…6.5
• CVE-2019-18795The BASS Audio Library 2.4.14 under Windows is prone to a BA…6.5