Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2019-1613

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected running software versions prior to 6.2(27) and 8.2(3). Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(6). Nexus 3500 Platform Switches are affected running software versions prior to 6.0(2)A8(11) and 7.0(3)I7(6). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I4(9), 7.0(3)I7(6). Nexus 9500 R-Series Line Cards and Fabric Modules are affected running software versions prior to 7.0(3)F3(5). Nexus 7000 and 7700 Series Switches are affected running software versions prior to 6.2(22) and 8.2(3).

Published

2019-03-11T21:29:00.840

Last Modified

2024-11-21T04:36:55.777

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.7 (MEDIUM)

CVSSv2 Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

  • Access Vector: LOCAL
  • Access Complexity: LOW
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

3.9

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-77
  • Type: Primary
    CWE-88
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco nx-os 7.0\(3\)f3\(3\) Yes
Operating System cisco nx-os 7.0\(3\)i7\(2\) Yes
Hardware cisco 9432pq - No
Hardware cisco 9536pq - No
Hardware cisco 9636pq - No
Hardware cisco 9736pq - No
Hardware cisco n9k-x9432c-s - No
Hardware cisco n9k-x9464px - No
Hardware cisco n9k-x9464tx2 - No
Hardware cisco n9k-x9564px - No
Hardware cisco n9k-x9564tx - No
Hardware cisco n9k-x9636c-r - No
Hardware cisco n9k-x9636c-rx - No
Hardware cisco n9k-x97160yc-ex - No
Hardware cisco n9k-x9732c-ex - No
Hardware cisco n9k-x9732c-fx - No
Hardware cisco n9k-x9736c-ex - No
Hardware cisco n9k-x9736c-fx - No
Hardware cisco n9k-x9788tc-fx - No
Hardware cisco nexus_92160yc-x - No
Hardware cisco nexus_92300yc - No
Hardware cisco nexus_92304qc - No
Hardware cisco nexus_9236c - No
Hardware cisco nexus_9272q - No
Hardware cisco nexus_93108tc-ex - No
Hardware cisco nexus_93108tc-fx - No
Hardware cisco nexus_93120tx - No
Hardware cisco nexus_9316d-gx - No
Hardware cisco nexus_93180lc-ex - No
Hardware cisco nexus_93180yc-ex - No
Hardware cisco nexus_93180yc-fx - No
Hardware cisco nexus_93240yc-fx2 - No
Hardware cisco nexus_9332c - No
Hardware cisco nexus_9336c-fx2 - No
Hardware cisco nexus_9348gc-fxp - No
Hardware cisco nexus_93600cd-gx - No
Hardware cisco nexus_9364c - No
Hardware cisco nexus_9504 - No
Hardware cisco nexus_9508 - No
Hardware cisco nexus_9516 - No
Hardware cisco x9636q-r - No
Operating System cisco nx-os 9.2\(1\) Yes
Hardware cisco n3k-c31128pq-10ge - No
Hardware cisco n3k-c3132c-z - No
Hardware cisco n3k-c3164q-40ge - No
Hardware cisco n3k-c3264q - No
Operating System cisco nx-os 7.0\(3\)i7\(2\) Yes
Operating System cisco nx-os 8.2\(1\) Yes
Operating System cisco nx-os 9.2\(2\) Yes
Hardware cisco n77-f312ck-26 - No
Hardware cisco n77-f324fq-25 - No
Hardware cisco n77-f348xp-23 - No
Hardware cisco n77-f430cq-36 - No
Hardware cisco n77-m312cq-26l - No
Hardware cisco n77-m324fq-25l - No
Hardware cisco n77-m348xp-23l - No
Hardware cisco n7k-f248xp-25e - No
Hardware cisco n7k-f306ck-25 - No
Hardware cisco n7k-f312fq-25 - No
Hardware cisco n7k-m202cf-22l - No
Hardware cisco n7k-m206fq-23l - No
Hardware cisco n7k-m224xp-23l - No
Hardware cisco n7k-m324fq-25l - No
Hardware cisco n7k-m348xp-25l - No
References