Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-12662

A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper signature verification during the installation of an Open Virtual Appliance (OVA) image. An authenticated, local attacker could exploit this vulnerability and load a malicious, unsigned OVA image on an affected device. A successful exploit could allow an attacker to perform code execution on a crafted software OVA image.

Published

2019-09-25T21:15:11.203

Last Modified

2024-11-21T04:23:18.110

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

10.0

Weaknesses
  • Type: Secondary
    CWE-347
  • Type: Primary
    CWE-347
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco ios_xe 16.8.1 Yes
Operating System cisco nx-os 8.1\(0.2\)s0 Yes
Operating System cisco nx-os 8.1\(1\) Yes
Operating System cisco nx-os 8.1\(1\)s5 Yes
Hardware cisco mds_9000 - No
Operating System cisco nx-os 8.1\(0\)bd\(0.20\) Yes
Hardware cisco nexus_9000v - No
Hardware cisco nexus_92160yc-x - No
Hardware cisco nexus_92300yc - No
Hardware cisco nexus_92304qc - No
Hardware cisco nexus_92348gc-x - No
Hardware cisco nexus_9236c - No
Hardware cisco nexus_9272q - No
Hardware cisco nexus_93108tc-ex - No
Hardware cisco nexus_93108tc-fx - No
Hardware cisco nexus_93120tx - No
Hardware cisco nexus_93128tx - No
Hardware cisco nexus_93180lc-ex - No
Hardware cisco nexus_93180yc-ex - No
Hardware cisco nexus_93180yc-fx - No
Hardware cisco nexus_93216tc-fx2 - No
Hardware cisco nexus_93240yc-fx2 - No
Hardware cisco nexus_9332c - No
Hardware cisco nexus_9332pq - No
Hardware cisco nexus_93360yc-fx2 - No
Hardware cisco nexus_9336c-fx2 - No
Hardware cisco nexus_9336pq_aci_spine - No
Hardware cisco nexus_9348gc-fxp - No
Hardware cisco nexus_9364c - No
Hardware cisco nexus_9372px - No
Hardware cisco nexus_9372px-e - No
Hardware cisco nexus_9372tx - No
Hardware cisco nexus_9372tx-e - No
Hardware cisco nexus_9396px - No
Hardware cisco nexus_9396tx - No
Hardware cisco nexus_9504 - No
Hardware cisco nexus_9508 - No
Hardware cisco nexus_9516 - No
Operating System cisco nexus_3016_firmware - Yes
Hardware cisco nexus_3016 - No
Operating System cisco nexus_3048_firmware - Yes
Hardware cisco nexus_3048 - No
Operating System cisco nexus_3064_firmware - Yes
Hardware cisco nexus_3064 - No
Operating System cisco nexus_3064-t_firmware - Yes
Hardware cisco nexus_3064-t - No
Operating System cisco nexus_31108pc-v_firmware - Yes
Hardware cisco nexus_31108pc-v - No
Operating System cisco nexus_31108tc-v_firmware - Yes
Hardware cisco nexus_31108tc-v - No
Operating System cisco nexus_31128pq_firmware - Yes
Hardware cisco nexus_31128pq - No
Operating System cisco nexus_3132c-z_firmware - Yes
Hardware cisco nexus_3132c-z - No
Operating System cisco nexus_3132q_firmware - Yes
Hardware cisco nexus_3132q - No
Operating System cisco nexus_3132q-v_firmware - Yes
Hardware cisco nexus_3132q-v - No
Operating System cisco nexus_3132q-xl_firmware - Yes
Hardware cisco nexus_3132q-xl - No
Operating System cisco nexus_3164q_firmware - Yes
Hardware cisco nexus_3164q - No
Operating System cisco nexus_3172_firmware - Yes
Hardware cisco nexus_3172 - No
Operating System cisco nexus_3172pq-xl_firmware - Yes
Hardware cisco nexus_3172pq-xl - No
Operating System cisco nexus_3172tq_firmware - Yes
Hardware cisco nexus_3172tq - No
Operating System cisco nexus_3172tq-32t_firmware - Yes
Hardware cisco nexus_3172tq-32t - No
Operating System cisco nexus_3172tq-xl_firmware - Yes
Hardware cisco nexus_3172tq-xl - No
Operating System cisco nexus_3232c_firmware - Yes
Hardware cisco nexus_3232c - No
Operating System cisco nexus_3264c-e_firmware - Yes
Hardware cisco nexus_3264c-e - No
Operating System cisco nexus_3264q_firmware - Yes
Hardware cisco nexus_3264q - No
Operating System cisco nexus_3408-s_firmware - Yes
Hardware cisco nexus_3408-s - No
Operating System cisco nexus_34180yc_firmware - Yes
Hardware cisco nexus_34180yc - No
Operating System cisco nexus_34200yc-sm_firmware - Yes
Hardware cisco nexus_34200yc-sm - No
Operating System cisco nexus_3432d-s_firmware - Yes
Hardware cisco nexus_3432d-s - No
Operating System cisco nexus_3464c_firmware - Yes
Hardware cisco nexus_3464c - No
Operating System cisco nexus_3524_firmware - Yes
Hardware cisco nexus_3524 - No
Operating System cisco nexus_3524-x_firmware - Yes
Hardware cisco nexus_3524-x - No
Operating System cisco nexus_3524-xl_firmware - Yes
Hardware cisco nexus_3524-xl - No
Operating System cisco nexus_3548_firmware - Yes
Hardware cisco nexus_3548 - No
Operating System cisco nexus_3548-x_firmware - Yes
Hardware cisco nexus_3548-x - No
Operating System cisco nexus_3548-xl_firmware - Yes
Hardware cisco nexus_3548-xl - No
Operating System cisco nexus_5548p_firmware - Yes
Hardware cisco nexus_5548p - No
Operating System cisco nexus_5548up_firmware - Yes
Hardware cisco nexus_5548up - No
Operating System cisco nexus_5596t_firmware - Yes
Hardware cisco nexus_5596t - No
Operating System cisco nexus_5596up_firmware - Yes
Hardware cisco nexus_5596up - No
Operating System cisco nexus_56128p_firmware - Yes
Hardware cisco nexus_56128p - No
Operating System cisco nexus_5624q_firmware - Yes
Hardware cisco nexus_5624q - No
Operating System cisco nexus_5648q_firmware - Yes
Hardware cisco nexus_5648q - No
Operating System cisco nexus_5672up_firmware - Yes
Hardware cisco nexus_5672up - No
Operating System cisco nexus_5696q_firmware - Yes
Hardware cisco nexus_5696q - No
Operating System cisco nexus_6001_firmware - Yes
Hardware cisco nexus_6001 - No
Operating System cisco nexus_6004_firmware - Yes
Hardware cisco nexus_6004 - No
Operating System cisco nexus_7000_10-slot_firmware - Yes
Hardware cisco nexus_7000_10-slot - No
Operating System cisco nexus_7000_18-slot_firmware - Yes
Hardware cisco nexus_7000_18-slot - No
Operating System cisco nexus_7000_4-slot_firmware - Yes
Hardware cisco nexus_7000_4-slot - No
Operating System cisco nexus_7000_9-slot_firmware - Yes
Hardware cisco nexus_7000_9-slot - No
Operating System cisco nexus_7700_10-slot_firmware - Yes
Hardware cisco nexus_7700_10-slot - No
Operating System cisco nexus_7700_18-slot_firmware - Yes
Hardware cisco nexus_7700_18-slot - No
Operating System cisco nexus_7700_2-slot_firmware - Yes
Hardware cisco nexus_7700_2-slot - No
Operating System cisco nexus_7700_6-slot_firmware - Yes
Hardware cisco nexus_7700_6-slot - No
References