AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2019-19642

HIGH · CVSS 8.8 EPSS 19.04%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2019-12-08 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2019-19642
Severity
HIGH
CVSS
8.8
EPSS
19.04%

Original NVD Description

On SuperMicro X8STi-F motherboards with IPMI firmware 2.06 and BIOS 02.68, the Virtual Media feature allows OS Command Injection by authenticated attackers who can send HTTP requests to the IPMI IP address. This requires a POST to /rpc/setvmdrive.asp with shell metacharacters in ShareHost or ShareName. The attacker can achieve a persistent backdoor.