← Back

CVE-2019-1735

nvd nist
Published: May 15, 2019Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid user credentials to exploit this vulnerability.

Affected (13)

Products: Cisco: Nx Os
1 product
Nx Os
Configuration A
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Before 8.3\(1\)
Running on/withPlatform Versions
Cisco
Mds 9000
All versions
Cisco
Mds 9100
All versions
Cisco
Mds 9200
All versions
Cisco
Mds 9500
All versions
Cisco
Mds 9700
All versions
Configuration B
1 vulnerable · 53 platform
Vulnerable SoftwareAffected Versions
Before 7.0\(3\)i7\(6\)
Running on/withPlatform Versions
Cisco
Nexus 3016
All versions
Cisco
Nexus 3048
All versions
Cisco
Nexus 3064
All versions
Cisco
Nexus 3064 T
All versions
Cisco
Nexus 31108pc V
All versions
Cisco
Nexus 31108tc V
All versions
Cisco
Nexus 31128pq
All versions
Cisco
Nexus 3132c Z
All versions
Cisco
Nexus 3132q
All versions
Cisco
Nexus 3132q V
All versions
Cisco
Nexus 3132q Xl
All versions
Cisco
Nexus 3164q
All versions
Cisco
Nexus 3172
All versions
Cisco
Nexus 3172pq Xl
All versions
Cisco
Nexus 3172tq
All versions
Cisco
Nexus 3172tq 32t
All versions
Cisco
Nexus 3172tq Xl
All versions
Cisco
Nexus 3232c
All versions
Cisco
Nexus 3264c E
All versions
Cisco
Nexus 3264q
All versions
Cisco
Nexus 3408 S
All versions
Cisco
Nexus 34180yc
All versions
Cisco
Nexus 3432d S
All versions
Cisco
Nexus 3464c
All versions
Cisco
Nexus 9000v
All versions
Cisco
Nexus 92160yc X
All versions
Cisco
Nexus 92300yc
All versions
Cisco
Nexus 92304qc
All versions
Cisco
Nexus 92348gc X
All versions
Cisco
Nexus 9236c
All versions
Cisco
Nexus 9272q
All versions
Cisco
Nexus 93108tc Ex
All versions
Cisco
Nexus 93108tc Fx
All versions
Cisco
Nexus 93120tx
All versions
Cisco
Nexus 93128tx
All versions
Cisco
Nexus 93180lc Ex
All versions
Cisco
Nexus 93180yc Ex
All versions
Cisco
Nexus 93180yc Fx
All versions
Cisco
Nexus 93216tc Fx2
All versions
Cisco
Nexus 93240yc Fx2
All versions
Cisco
Nexus 9332c
All versions
Cisco
Nexus 9332pq
All versions
Cisco
Nexus 93360yc Fx2
All versions
Cisco
Nexus 9336c Fx2
All versions
Cisco
Nexus 9336pq Aci Spine
All versions
Cisco
Nexus 9348gc Fxp
All versions
Cisco
Nexus 9364c
All versions
Cisco
Nexus 9372px
All versions
Cisco
Nexus 9372px E
All versions
Cisco
Nexus 9372tx
All versions
Cisco
Nexus 9372tx E
All versions
Cisco
Nexus 9396px
All versions
Cisco
Nexus 9396tx
All versions
Configuration C
2 vulnerable · 6 platform
Vulnerable SoftwareAffected Versions
Cisco
Before 6.0\(2\)a8\(11\)
From 7.0\(3\)i4 to 7.0\(3\)i7\(6\)
Running on/withPlatform Versions
Cisco
Nexus 3524
All versions
Cisco
Nexus 3524 X
All versions
Cisco
Nexus 3524 Xl
All versions
Cisco
Nexus 3548
All versions
Cisco
Nexus 3548 X
All versions
Cisco
Nexus 3548 Xl
All versions
Configuration D
1 vulnerable · 3 platform
Vulnerable SoftwareAffected Versions
From 7.3 to 7.3\(4\)n1\(1\)
Running on/withPlatform Versions
Cisco
Nexus 5500
All versions
Cisco
Nexus 5600
All versions
Cisco
Nexus 6000
All versions
Configuration E
3 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Cisco
From 6.2 to 6.2\(22\)
From 7.2 to 7.3\(3\)d1\(1\)
From 8.0 to 8.3\(1\)
Running on/withPlatform Versions
Cisco
Nexus 7000
All versions
Cisco
Nexus 7700
All versions
Configuration F
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
Before 4.0\(2a\)
Running on/withPlatform Versions
Cisco
Ucs 6248up
All versions
Cisco
Ucs 6296up
All versions
Cisco
Ucs 6324
All versions
Cisco
Ucs 6332
All versions
Cisco
Ucs 6332 16up
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
From 5.2 to 5.2\(1\)sv5\(1.1\)
Running on/withPlatform Versions
Cisco
Nexus 1000ve
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Up to 5.2
Running on/withPlatform Versions
Cisco
Nexus 1000v
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Before 5.2\(1\)sv3\(4.1a\)
Running on/withPlatform Versions
Cisco
Nexus 1000v
All versions
Configuration J
1 vulnerable · 5 platform
Vulnerable SoftwareAffected Versions
From 7.0\(3\) to 7.0\(3\)f3\(5\)
Running on/withPlatform Versions
Cisco
Nexus 36180yc R
All versions
Cisco
Nexus 3636c R
All versions
Cisco
Nexus 9504
All versions
Cisco
Nexus 9508
All versions
Cisco
Nexus 9516
All versions

References (4)

Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.