Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability (Cisco Cisco Unified Computing System Director)

CVE-2019-1935

CRITICAL 9.8

At a glance

Source: NVD
EPSS: EPSS 83.39 % · percentile 100 (2026-10-31)
State: PUBLISHED
Published: 2019-08-21 18:25 UTC
Updated: 2024-11-19 19:00 UTC
Assigner: cisco
NVD status: Modified

Search on…

Description

A vulnerability in Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to log in to the CLI of an affected system by using the SCP User account (scpuser), which has default user credentials. The vulnerability is due to the presence of a documented default account with an undocumented default password and incorrect permission settings for that account. Changing the default password for this account is not enforced during the installation of the product. An attacker could exploit this vulnerability by using the account to log in to an affected system. A successful exploit could allow the attacker to execute arbitrary commands with the privileges of the scpuser account. This includes full read and write access to the system's database.

Weaknesses (CWE)

CWE-798 — Use of Hard-coded Credentials

References

Scores

Version	Score	Vector	Scored by
CVSS 3.0	CRITICAL 9.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	cisco
CVSS 3.1	CRITICAL 9.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	NVD · nvd@nist.gov (Primary)
CVSS 3.0	CRITICAL 9.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	NVD · psirt@cisco.com (Secondary)
CVSS 2.0	HIGH 10.0	AV:N/AC:L/Au:N/C:C/I:C/A:C	NVD · nvd@nist.gov (Primary)

European references

ENISA EUVD · EUVD-2019-10492
GCVE · GCVE-0-2019-1935

CERT-FR advisories

CERTFR-2019-AVI-410 — Multiples vulnérabilités dans les produits Cisco · cert.ssi.gouv.fr

Affected configurations (NVD CPE)

cpe:2.3:a:cisco:integrated_management_controller_supervisor:*:*:*:*:*:*:*:* ≥ 2.2.0.0 ≤ 2.2.0.6
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:6.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:6.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:6.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:6.6.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:6.7\(0.0.67265\):*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:6.7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director:6.7.1.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.0.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.5.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.6.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.0.0:*:*:*:*:*:*:*
cpe:2.3:a:cisco:ucs_director_express_for_big_data:3.7.1.0:*:*:*:*:*:*:*

Affected products

Product	Versions
Cisco · Cisco Unified Computing System Director	affected unspecified < 6.7.3.0

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)	Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD

💣 Cisco Integrated Management Controller Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data SCP User Default Credentials Vulnerability (Cisco Cisco Unified Computing System Director)