Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-1965


A vulnerability in the Virtual Shell (VSH) session management for Cisco NX-OS Software could allow an authenticated, remote attacker to cause a VSH process to fail to delete upon termination. This can lead to a build-up of VSH processes that overtime can deplete system memory. When there is no system memory available, this can cause unexpected system behaviors and crashes. The vulnerability is due to the VSH process not being properly deleted when a remote management connection to the device is disconnected. An attacker could exploit this vulnerability by repeatedly performing a remote management connection to the device and terminating the connection in an unexpected manner. A successful exploit could allow the attacker to cause the VSH processes to fail to delete, which can lead to a system-wide denial of service (DoS) condition. The attacker must have valid user credentials to log in to the device using the remote management connection.


Published

2019-08-28T19:15:11.053

Last Modified

2024-11-21T04:37:47.067

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.7 (HIGH)

CVSSv2 Vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

  • Access Vector: NETWORK
  • Access Complexity: LOW
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: PARTIAL
Exploitability Score

8.0

Impact Score

2.9

Weaknesses
  • Type: Secondary
    CWE-400
  • Type: Primary
    CWE-772

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco nx-os < 6.2\(29\) Yes
Operating System cisco nx-os < 8.4 Yes
Hardware cisco mds_9132t - No
Hardware cisco mds_9148s - No
Hardware cisco mds_9148t - No
Hardware cisco mds_9216 - No
Hardware cisco mds_9216a - No
Hardware cisco mds_9216i - No
Hardware cisco mds_9222i - No
Hardware cisco mds_9250i - No
Hardware cisco mds_9396s - No
Hardware cisco mds_9396t - No
Hardware cisco mds_9506 - No
Hardware cisco mds_9509 - No
Hardware cisco mds_9513 - No
Hardware cisco mds_9706 - No
Hardware cisco mds_9710 - No
Hardware cisco mds_9718 - No
Operating System cisco nx-os < 9.2 Yes
Hardware cisco n9k-c9504-fm-r - No
Hardware cisco n9k-c9508-fm-r - No
Hardware cisco n9k-x96136yc-r - No
Hardware cisco n9k-x9636c-r - No
Hardware cisco n9k-x9636c-rx - No
Hardware cisco n9k-x9636q-r - No
Hardware cisco nexus_36180yc-r - No
Hardware cisco nexus_3636c-r - No
Hardware cisco x96136yc-r - No
Hardware cisco x9636c-r - No
Hardware cisco x9636c-rx - No
Hardware cisco x9636q-r - No
Operating System cisco nx-os < 7.1\(5\)n1\(1b\) Yes
Operating System cisco nx-os < 7.3\(5\)n1\(1\) Yes
Hardware cisco nexus_5010 - No
Hardware cisco nexus_5020 - No
Hardware cisco nexus_5548p - No
Hardware cisco nexus_5548up - No
Hardware cisco nexus_5596t - No
Hardware cisco nexus_5596up - No
Hardware cisco nexus_56128p - No
Hardware cisco nexus_5624q - No
Hardware cisco nexus_5648q - No
Hardware cisco nexus_5672up - No
Hardware cisco nexus_5672up-16g - No
Hardware cisco nexus_5696q - No
Hardware cisco nexus_6001 - No
Hardware cisco nexus_6004 - No
Operating System cisco nx-os < 6.2\(22\) Yes
Operating System cisco nx-os < 7.3\(4\)d1\(1\) Yes
Operating System cisco nx-os < 8.2\(3\) Yes
Operating System cisco nx-os < 8.4 Yes
Hardware cisco 7000_10-slot - No
Hardware cisco 7000_18-slot - No
Hardware cisco 7000_4-slot - No
Hardware cisco 7000_9-slot - No
Hardware cisco 7700_10-slot - No
Hardware cisco 7700_18-slot - No
Hardware cisco 7700_2-slot - No
Hardware cisco 7700_6-slot - No
Hardware cisco n77-f312ck-26 - No
Hardware cisco n77-f324fq-25 - No
Hardware cisco n77-f348xp-23 - No
Hardware cisco n77-f430cq-36 - No
Hardware cisco n77-m312cq-26l - No
Hardware cisco n77-m324fq-25l - No
Hardware cisco n77-m348xp-23l - No
Hardware cisco n7k-f248xp-25e - No
Hardware cisco n7k-f306ck-25 - No
Hardware cisco n7k-f312fq-25 - No
Hardware cisco n7k-m202cf-22l - No
Hardware cisco n7k-m206fq-23l - No
Hardware cisco n7k-m224xp-23l - No
Hardware cisco n7k-m324fq-25l - No
Hardware cisco n7k-m348xp-25l - No
Hardware cisco nexus_7000_supervisor_1 - No
Hardware cisco nexus_7000_supervisor_2 - No
Hardware cisco nexus_7000_supervisor_2e - No
Hardware cisco nexus_7700_supervisor_2e - No
Hardware cisco nexus_7700_supervisor_3e - No
Operating System cisco nx-os < 7.0\(3\)i4\(9\) Yes
Operating System cisco nx-os < 7.0\(3\)i7\(4\) Yes
Hardware cisco n9k-c92160yc-x - No
Hardware cisco n9k-c9236c - No
Hardware cisco n9k-c9272q - No
Hardware cisco n9k-c93180lc-ex - No
Hardware cisco n9k-c93180yc-ex - No
Hardware cisco n9k-c93180yc-fx - No
Hardware cisco n9k-x9732c-ex - No
Hardware cisco n9k-x9736c-fx - No
Hardware cisco nexus_3048 - No
Operating System cisco nx-os < 7.0\(3\)i7\(6\) Yes
Operating System cisco nx-os < 9.2\(3\) Yes
Hardware cisco nexus_3524-x\/xl - No
Hardware cisco nexus_3548-x\/xl - No
Operating System cisco nx-os < 3.2\(3k\) Yes
Operating System cisco nx-os < 4.0\(2e\) Yes
Hardware cisco ucs-6296up - No
Hardware cisco ucs_6248up - No
Hardware cisco ucs_6324 - No
Hardware cisco ucs_6332 - No
Hardware cisco ucs_6332-16up - No

References