[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1ZDmp-idDP6SmR2Zzd29VLL7KcPe8Ox7OnaczwuIbz4":3,"g5a-risk:CVE-2019-1880":204},{"success":4,"data":5,"meta":202},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":43,"epssPercentile":15,"epssTimeSeries":44,"severity":45,"affectedProducts":46,"affectedProductsCount":74,"references":75,"referencesCount":85,"weaknesses":86,"weaknessesCount":95,"isActivelyExploited":96,"cisaInfo":15,"otxData":15,"relatedBlogPosts":97,"seoMetadata":98,"configurations":123,"relatedVendorCves":200,"notableEvents":201},"CVE-2019-1880","What is CVE-2019-1880?","A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System (UCS) C-Series Rack Servers could allow an authenticated, local attacker to install compromised BIOS firmware on an affected device. The vulnerability is due to insufficient validation of the firmware image file. An attacker could exploit this vulnerability by executing the BIOS upgrade utility with a specific set of options. A successful exploit could allow the attacker to bypass the firmware signature-verification process and install compromised BIOS firmware on an affected device.","A vulnerability in the BIOS upgrade utility of Cisco Unified Computing System (UCS) C-Series Rack Servers could allow an authenticated, local attacker to ins...","2019-06-05T17:29:00.647","2019-10-09T23:48:25.19",4.4,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:N\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":34,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","HIGH","NONE","UNCHANGED","MEDIUM",0.8,3.6,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"ykramarz@cisco.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":25,"IntegrityImpact":24,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[35],{"Source":18,"Type":19,"CVSSData":36,"BaseSeverity":23,"ExploitabilityScore":41,"ImpactScore":42,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":37,"VectorString":38,"AccessVector":22,"AccessComplexity":23,"Authentication":25,"ConfidentialityImpact":25,"IntegrityImpact":39,"AvailabilityImpact":25,"BaseScore":40,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N","PARTIAL",2.1,3.9,2.9,0.00208,[43,43,43,43,43,43,43],"Medium",[47,52,56,59,62,65,68,71],{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"cisco","unified_computing_system_server_firmware","*","cpe:2.3:o:cisco:unified_computing_system_server_firmware:*:*:*:*:*:*:*:*",{"vendor":48,"product":53,"version":54,"criteria":55,"vulnerable":4},"unified_computing_system_c125_m5","-","cpe:2.3:h:cisco:unified_computing_system_c125_m5:-:*:*:*:*:*:*:*",{"vendor":48,"product":57,"version":54,"criteria":58,"vulnerable":4},"unified_computing_system_c220_m4","cpe:2.3:h:cisco:unified_computing_system_c220_m4:-:*:*:*:*:*:*:*",{"vendor":48,"product":60,"version":54,"criteria":61,"vulnerable":4},"unified_computing_system_c220_m5","cpe:2.3:h:cisco:unified_computing_system_c220_m5:-:*:*:*:*:*:*:*",{"vendor":48,"product":63,"version":54,"criteria":64,"vulnerable":4},"unified_computing_system_c240_m4","cpe:2.3:h:cisco:unified_computing_system_c240_m4:-:*:*:*:*:*:*:*",{"vendor":48,"product":66,"version":54,"criteria":67,"vulnerable":4},"unified_computing_system_c240_m5","cpe:2.3:h:cisco:unified_computing_system_c240_m5:-:*:*:*:*:*:*:*",{"vendor":48,"product":69,"version":54,"criteria":70,"vulnerable":4},"unified_computing_system_c460_m4","cpe:2.3:h:cisco:unified_computing_system_c460_m4:-:*:*:*:*:*:*:*",{"vendor":48,"product":72,"version":54,"criteria":73,"vulnerable":4},"unified_computing_system_c480_m5","cpe:2.3:h:cisco:unified_computing_system_c480_m5:-:*:*:*:*:*:*:*",8,[76,80],{"url":77,"source":78,"tags":79},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108680","Securityfocus",[],{"url":81,"source":82,"tags":83},"https:\u002F\u002Ftools.cisco.com\u002Fsecurity\u002Fcenter\u002Fcontent\u002FCiscoSecurityAdvisory\u002Fcisco-sa-20190605-ucs-biossig-bypass","Cisco",[84],"Vendor Advisory",2,[87],{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":94},"CWE-345","Insufficient Verification of Data Authenticity","The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.","","Draft","Class","Simple",1,false,[],{"title":99,"metaDescription":100,"keywords":101,"canonicalUrl":102,"structuredData":103},"What is CVE-2019-1880? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-1880, a medium severity cyber security vulnerability from 2019. A vulnerability in the BIOS upgrade utility of Cisco Unifi...","CVE-2019-1880, CVE-2019-1880 vulnerability, CVE-2019-1880 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, cisco security, unified_computing_system_server_firmware vulnerability, unified_computing_system_c125_m5 vulnerability, unified_computing_system_c220_m4 vulnerability, unified_computing_system_c220_m5 vulnerability, unified_computing_system_c240_m4 vulnerability","\u002Fwhat-is\u002Fcve-2019-1880",{"@context":104,"@type":105,"headline":99,"description":100,"datePublished":10,"dateModified":11,"author":106,"publisher":110,"about":114,"mainEntityOfPage":118,"articleSection":121,"keywords":122},"https:\u002F\u002Fschema.org","TechArticle",{"@type":107,"name":108,"url":109},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":107,"name":108,"url":109,"logo":111},{"@type":112,"url":113},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":115,"name":6,"description":116,"additionalType":117},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":119,"@id":120},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-1880","Cybersecurity","CVE-2019-1880, CVE-2019-1880 vulnerability, CVE-2019-1880 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[124,137,151,162,172,181,191],{"Operator":125,"Negate":15,"Nodes":126},"AND",[127,133],{"Operator":128,"Negate":15,"CPEMatch":129},"OR",[130],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":131,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":132,"VersionEndIncluding":15},"C98B6DE4-8759-498A-93CC-B54376EAC099","4.0\\(2g\\)",{"Operator":128,"Negate":15,"CPEMatch":134},[135],{"Vulnerable":15,"Criteria":55,"MatchCriteriaID":136,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"0E940DBA-1F06-479A-B697-0070174EB2F5",{"Operator":125,"Negate":15,"Nodes":138},[139,147],{"Operator":128,"Negate":15,"CPEMatch":140},[141,144],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":143,"VersionEndIncluding":15},"83F54B3E-D792-4971-9EDC-31DA712FAFB9","3.0\\(4l\\)",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":146,"VersionEndExcluding":132,"VersionEndIncluding":15},"3CD23D8E-C2E3-4C51-9E8C-58DDC810AEF6","4.0",{"Operator":128,"Negate":15,"CPEMatch":148},[149],{"Vulnerable":15,"Criteria":58,"MatchCriteriaID":150,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"C5502506-02DD-43C8-AED7-847C71AFBBBD",{"Operator":125,"Negate":15,"Nodes":152},[153,158],{"Operator":128,"Negate":15,"CPEMatch":154},[155],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":157,"VersionEndIncluding":15},"845FBF06-3662-420A-A096-18EE3DEE18C3","4.0\\(4c\\)",{"Operator":128,"Negate":15,"CPEMatch":159},[160],{"Vulnerable":15,"Criteria":61,"MatchCriteriaID":161,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"4221A779-1C3C-4EA5-980A-4F9BA206824C",{"Operator":125,"Negate":15,"Nodes":163},[164,168],{"Operator":128,"Negate":15,"CPEMatch":165},[166,167],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":143,"VersionEndIncluding":15},{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":146,"VersionEndExcluding":132,"VersionEndIncluding":15},{"Operator":128,"Negate":15,"CPEMatch":169},[170],{"Vulnerable":15,"Criteria":64,"MatchCriteriaID":171,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"596E83E7-E11F-4BF7-AF79-C1A5805C0580",{"Operator":125,"Negate":15,"Nodes":173},[174,177],{"Operator":128,"Negate":15,"CPEMatch":175},[176],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":157,"VersionEndIncluding":15},{"Operator":128,"Negate":15,"CPEMatch":178},[179],{"Vulnerable":15,"Criteria":67,"MatchCriteriaID":180,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"A69A9518-AC5F-440D-A3F1-328035D3157C",{"Operator":125,"Negate":15,"Nodes":182},[183,187],{"Operator":128,"Negate":15,"CPEMatch":184},[185,186],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":142,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":143,"VersionEndIncluding":15},{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":145,"VersionStartExcluding":15,"VersionStartIncluding":146,"VersionEndExcluding":132,"VersionEndIncluding":15},{"Operator":128,"Negate":15,"CPEMatch":188},[189],{"Vulnerable":15,"Criteria":70,"MatchCriteriaID":190,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"326CD3F6-3DC3-4840-811F-6ED353DC5F33",{"Operator":125,"Negate":15,"Nodes":192},[193,196],{"Operator":128,"Negate":15,"CPEMatch":194},[195],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":156,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":157,"VersionEndIncluding":15},{"Operator":128,"Negate":15,"CPEMatch":197},[198],{"Vulnerable":15,"Criteria":73,"MatchCriteriaID":199,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"51E29763-0766-4AEA-A434-37D48B6FAE08",[],[],{"lastModified":11,"cacheTime":203,"version":37},1792443175155,{"score":205,"band":206,"action":207,"scoredAt":208},14,"Info","Track","2026-10-19T07:00:18.898713+00:00"]