CVE-2019-1935

A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which has default user credentials. The vulnerability is due to the presence of a documented default account with an undocumented default password and incorrect permission settings for that account. Changing the default password for this account is not enforced during the installation of the product. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the scpuser account. This includes full read and write access to the system's database.

• CWE-798
• CWE-798

• http://packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/154305/Cisco-UCS-Director-Default-scpuser-Password.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Aug/36Mailing List, Third Party Advisory
• https://seclists.org/bugtraq/2019/Aug/49Exploit, Mailing List, Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-usercredVendor Advisory
• http://packetstormsecurity.com/files/154239/Cisco-UCS-IMC-Supervisor-Authentication-Bypass-Command-Injection.htmlExploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/154305/Cisco-UCS-Director-Default-scpuser-Password.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Aug/36Mailing List, Third Party Advisory
• https://seclists.org/bugtraq/2019/Aug/49Exploit, Mailing List, Third Party Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190821-imcs-usercredVendor Advisory

Published

Aug 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19344There is a use-after-free issue in all samba 4.9.x versions …6.5
• CVE-2019-19345A vulnerability was found in all openshift/mediawiki-apb 4.x…7.8
• CVE-2019-19346An insecure modification vulnerability in the /etc/passwd fi…7
• CVE-2019-19347Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-19348An insecure modification vulnerability in the /etc/passwd fi…7
• CVE-2019-19349An insecure modification vulnerability in the /etc/passwd fi…7.8
• CVE-2019-19350An insecure modification vulnerability in the /etc/passwd fi…7.8
• CVE-2019-19351An insecure modification vulnerability in the /etc/passwd fi…7
• CVE-2019-19352An insecure modification vulnerability in the /etc/passwd fi…7
• CVE-2019-19353An insecure modification vulnerability in the /etc/passwd fi…7
• CVE-2019-19354An insecure modification vulnerability in the /etc/passwd fi…7.8
• CVE-2019-19355An insecure modification vulnerability in the /etc/passwd fi…7