CVE-2019-1627: Cisco Integrated Management Controller Information Disclosure Vulnerability

Security readout for executives and security teams

CVE-2019-1627 lets a low-privileged authenticated remote user obtain sensitive user information from Cisco IMC configuration data. That information could help the user raise privileges. This is not described as unauthenticated compromise, but it matters where IMC access is broadly available. Exposure is most likely in environments running Cisco Unified Computing System management software with Cisco IMC Server Utilities enabled or accessible. Risk increases if management interfaces are reachable from user networks, VPN-wide ranges, or the internet, or if low-privileged IMC accounts are widely issued. Prioritize remediation where Cisco IMC manages production server infrastructure or is reachable beyond a small admin network. This is a medium-severity confidentiality issue, but leaked management data can create a path to broader compromise. Mitigation focus: Check Cisco’s advisory for affected releases and fixed software guidance.; Restrict IMC management access to trusted administrative networks only.; Review and reduce low-privileged IMC account access..

Prepared

May 24, 2026, 20:29 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.