Read the docs
TI-2019-01556 Aliases CVE-2019-1936GHSA-v93p-j269-v6hr

Improper input validation in Cisco Unified Computing System Director

Priority MEDIUM 61CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an authenticated, remote attacker to execute arbitrary commands on the underlying Linux shell as the root user. Exploitation of this vulnerability requires privileged access to an affected device. The vulnerability is due to insufficient validation of user-supplied input by the web-based management interface. An attacker could exploit this vulnerability by logging in to the web-based management interface with administrator privileges and then sending a malicious request to a certain part of the interface.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.39475 98th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix Fixed Cisco Unified Computing System Director (Cisco): 6.7.3.0

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
CiscoCisco Unified Computing System Directorbefore 6.7.3.06.7.3.0Patch availableCNA
  • Cisco Unified Computing System Director VendorCisco Affected before 6.7.3.0 Fixed in 6.7.3.0 Patch available CNA

CPE configurations NVD · 14

CPEVersionsRoleVendor
cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:*2.2.0.0 – 2.2.0.6VulnerableCisco
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.1.0.0:*:*:*:*:*:*:*2.1.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.0.0.0:*:*:*:*:*:*:*6.0.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.5.0.0:*:*:*:*:*:*:*6.5.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.6.0.0:*:*:*:*:*:*:*6.6.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.6.1.0:*:*:*:*:*:*:*6.6.1.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.7\(0.0.67265\):*:*:*:*:*:*:*6.7(0.0.67265)VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.7.0.0:*:*:*:*:*:*:*6.7.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director:6.7.1.0:*:*:*:*:*:*:*6.7.1.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0:*:*:*:*:*:*:*3.0.0.0VulnerableCisco
  • cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:* Versions 2.2.0.0 – 2.2.0.6 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.1.0.0:*:*:*:*:*:*:* Versions 2.1.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.0.0.0:*:*:*:*:*:*:* Versions 6.0.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.5.0.0:*:*:*:*:*:*:* Versions 6.5.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.6.0.0:*:*:*:*:*:*:* Versions 6.6.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.6.1.0:*:*:*:*:*:*:* Versions 6.6.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.7\(0.0.67265\):*:*:*:*:*:*:* Versions 6.7(0.0.67265) Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.7.0.0:*:*:*:*:*:*:* Versions 6.7.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director:6.7.1.0:*:*:*:*:*:*:* Versions 6.7.1.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0:*:*:*:*:*:*:* Versions 3.0.0.0 Vulnerable ·Cisco
Show 4 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0:*:*:*:*:*:*:*3.5.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0:*:*:*:*:*:*:*3.6.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0:*:*:*:*:*:*:*3.7.0.0VulnerableCisco
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0:*:*:*:*:*:*:*3.7.1.0VulnerableCisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0:*:*:*:*:*:*:* Versions 3.5.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0:*:*:*:*:*:*:* Versions 3.6.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0:*:*:*:*:*:*:* Versions 3.7.0.0 Vulnerable ·Cisco
  • cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0:*:*:*:*:*:*:* Versions 3.7.1.0 Vulnerable ·Cisco

Remediation

  • Fix · CNA Cisco Unified Computing System Director (Cisco) Fixed in 6.7.3.0

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Cisco Unified Computing System Director 6.7.3.0

    6 records Highest priority Priority CRITICAL 1 CRITICAL, 1 HIGH, 4 MEDIUM

    Other records, highest priority first

    • TI-2019-01555 Hard-coded credentials in Cisco Unified Computing System DirectorPriority CRITICAL 90
    • TI-2019-01557 Improper authentication in Cisco Unified Computing System DirectorPriority HIGH 81
    • TI-2019-01594 Improper authentication in Cisco Unified Computing System DirectorPriority MEDIUM 56
    Show all 6 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2019-1936
  2. 2026-10-03 Alias added: GHSA-v93p-j269-v6hr

References

Exploit 3

Advisory 2

  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
  • TI-2019-01555 Hard-coded credentials in Cisco Unified Computing System Director CVSS 3.1CRITICAL 9.8
  • TI-2019-01557 Improper authentication in Cisco Unified Computing System Director CVSS 3.0CRITICAL 9.8
  • TI-2019-01594 Improper authentication in Cisco Unified Computing System Director CVSS 3.0CRITICAL 9.8
  • TI-2019-01487 Cisco Integrated Management Controller Command Injection Vulnerability CVSS 3.1HIGH 8.8
  • TI-2015-05250 The JavaServer Pages (JSP) component in Cisco Integrated Management Controller (IMC)… CVSS 2.0HIGH 9.4
See all 26 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences