Read the docs
TI-2019-01555 Aliases CVE-2019-1935GHSA-c9g8-fgq6-h2wg

Hard-coded credentials in Cisco Unified Computing System Director

Priority CRITICAL 90CWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-798.

Summary

A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which has default user credentials. The vulnerability is due to the presence of a documented default account with an undocumented default password and incorrect permission settings for that account. Changing the default password for this account is not enforced during the installation of the product. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the scpuser account. This includes full read and write access to the system's database.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.83386 99th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix Fixed Cisco Unified Computing System Director (Cisco): 6.7.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Unified Computing System Directorbefore 6.7.3.06.7.3.0Patch availableCNA
  • Cisco Unified Computing System Director VendorCisco Affected before 6.7.3.0 Fixed in 6.7.3.0 Patch available CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*2.2.0.0 – 2.2.0.6VulnerableCisco
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.1.0.0:*:*:*:*:*:*:*2.1.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.0.0.0:*:*:*:*:*:*:*6.0.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.5.0.0:*:*:*:*:*:*:*6.5.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.6.0.0:*:*:*:*:*:*:*6.6.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.6.1.0:*:*:*:*:*:*:*6.6.1.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.7\(0.0.67265\):*:*:*:*:*:*:*6.7(0.0.67265)VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.7.0.0:*:*:*:*:*:*:*6.7.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.7.1.0:*:*:*:*:*:*:*6.7.1.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0:*:*:*:*:*:*:*3.0.0.0VulnerableCisco
  • cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:* Versions 2.2.0.0 – 2.2.0.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.1.0.0:*:*:*:*:*:*:* Versions 2.1.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.0.0.0:*:*:*:*:*:*:* Versions 6.0.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.5.0.0:*:*:*:*:*:*:* Versions 6.5.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.6.0.0:*:*:*:*:*:*:* Versions 6.6.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.6.1.0:*:*:*:*:*:*:* Versions 6.6.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.7\(0.0.67265\):*:*:*:*:*:*:* Versions 6.7(0.0.67265) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.7.0.0:*:*:*:*:*:*:* Versions 6.7.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.7.1.0:*:*:*:*:*:*:* Versions 6.7.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0:*:*:*:*:*:*:* Versions 3.0.0.0 Vulnerable ·Cisco
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0:*:*:*:*:*:*:*3.5.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0:*:*:*:*:*:*:*3.6.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0:*:*:*:*:*:*:*3.7.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0:*:*:*:*:*:*:*3.7.1.0VulnerableCisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0:*:*:*:*:*:*:* Versions 3.5.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0:*:*:*:*:*:*:* Versions 3.6.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0:*:*:*:*:*:*:* Versions 3.7.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0:*:*:*:*:*:*:* Versions 3.7.1.0 Vulnerable ·Cisco

Remediation

  • Fix · CNA Cisco Unified Computing System Director (Cisco) Fixed in 6.7.3.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Cisco Unified Computing System Director 6.7.3.0

    6 records Highest priority Priority CRITICAL 1 CRITICAL, 1 HIGH, 4 MEDIUM

    Other records, highest priority first

    • TI-2019-01557 Improper authentication in Cisco Unified Computing System DirectorPriority HIGH 81
    • TI-2019-01556 Improper input validation in Cisco Unified Computing System DirectorPriority MEDIUM 61
    • TI-2019-01594 Improper authentication in Cisco Unified Computing System DirectorPriority MEDIUM 56
    Show all 6 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-1935
  2. 2026-10-03 Alias added: GHSA-c9g8-fgq6-h2wg

References

Exploit 2

Advisory 3

  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-01557 Improper authentication in Cisco Unified Computing System Director CVSS 3.0CRITICAL 9.8
  • TI-2019-01556 Improper input validation in Cisco Unified Computing System Director CVSS 3.1HIGH 7.2
  • TI-2019-01594 Improper authentication in Cisco Unified Computing System Director CVSS 3.0CRITICAL 9.8
  • TI-2019-01487 Cisco Integrated Management Controller Command Injection Vulnerability CVSS 3.1HIGH 8.8
  • TI-2015-05250 The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC)… CVSS 2.0HIGH 9.4
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences