← Back

CVE-2019-1778

nvd nist
Published: May 15, 2019Modified: Nov 21, 2024

JSON object

Loading...
6.7
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.8 / Impact: 5.9
Source: NVD

Description

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.

Affected (3)

Products: Cisco: Nx Os
1 product
Nx Os
Configuration A
2 vulnerable · 54 platform
Vulnerable SoftwareAffected Versions
Cisco
Before 7.0\(3\)i4\(9\)
From 7.0\(3\)i7 to 7.0\(3\)i7\(4\)
Running on/withPlatform Versions
Cisco
Nexus 3016
All versions
Cisco
Nexus 3048
All versions
Cisco
Nexus 3064
All versions
Cisco
Nexus 3064 T
All versions
Cisco
Nexus 31108pc V
All versions
Cisco
Nexus 31108tc V
All versions
Cisco
Nexus 31128pq
All versions
Cisco
Nexus 3132c Z
All versions
Cisco
Nexus 3132q
All versions
Cisco
Nexus 3132q V
All versions
Cisco
Nexus 3132q Xl
All versions
Cisco
Nexus 3164q
All versions
Cisco
Nexus 3172
All versions
Cisco
Nexus 3172pq Xl
All versions
Cisco
Nexus 3172tq
All versions
Cisco
Nexus 3172tq 32t
All versions
Cisco
Nexus 3172tq Xl
All versions
Cisco
Nexus 3232c
All versions
Cisco
Nexus 3264c E
All versions
Cisco
Nexus 3264q
All versions
Cisco
Nexus 34180yc
All versions
Cisco
Nexus 3464c
All versions
Cisco
Nexus 3524
All versions
Cisco
Nexus 3524 X
All versions
Cisco
Nexus 3524 X/xl
All versions
Cisco
Nexus 3524 Xl
All versions
Cisco
Nexus 3548
All versions
Cisco
Nexus 3548 X
All versions
Cisco
Nexus 3548 X/xl
All versions
Cisco
Nexus 3548 Xl
All versions
Cisco
Nexus 9200yc
All versions
Cisco
Nexus 92304qc
All versions
Cisco
Nexus 9236c
All versions
Cisco
Nexus 9272q
All versions
Cisco
Nexus 93108tc Ex
All versions
Cisco
Nexus 93108tc Fx
All versions
Cisco
Nexus 93120tx
All versions
Cisco
Nexus 93128tx
All versions
Cisco
Nexus 93180lc Ex
All versions
Cisco
Nexus 93180yc Ex
All versions
Cisco
Nexus 93180yc Fx
All versions
Cisco
Nexus 93240tc Fx2
All versions
Cisco
Nexus 9332c
All versions
Cisco
Nexus 9332pq
All versions
Cisco
Nexus 9336pq Aci
All versions
Cisco
Nexus 9348gc Fxp
All versions
Cisco
Nexus 9372px
All versions
Cisco
Nexus 9372px E
All versions
Cisco
Nexus 9372tx
All versions
Cisco
Nexus 9372tx E
All versions
Cisco
Nexus 9396px
All versions
Cisco
Nexus 9396tx
All versions
Cisco
Nexus 9508
All versions
Cisco
Nexus 9516
All versions
Configuration B
1 vulnerable · 12 platform
Vulnerable SoftwareAffected Versions
From 7.0\(3\) to 7.0\(3\)f3\(5\)
Running on/withPlatform Versions
Cisco
N9k C9504 Fm R
All versions
Cisco
N9k C9508 Fm R
All versions
Cisco
N9k X96136yc R
All versions
Cisco
N9k X9636c R
All versions
Cisco
N9k X9636c Rx
All versions
Cisco
N9k X9636q R
All versions
Cisco
Nexus 36180yc R
All versions
Cisco
Nexus 3636c R
All versions
Cisco
X96136yc R
All versions
Cisco
X9636c R
All versions
Cisco
X9636c Rx
All versions
Cisco
X9636q R
All versions

References (4)

Source: psirt@cisco.com
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.