CVE-2019-1664
Summary
| CVE | CVE-2019-1664 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-02-21 19:29:00 UTC |
| Updated | 2020-10-05 20:21:00 UTC |
| Description | A vulnerability in the hxterm service of Cisco HyperFlex Software could allow an unauthenticated, local attacker to gain root access to all nodes in the cluster. The vulnerability is due to insufficient authentication controls. An attacker could exploit this vulnerability by connecting to the hxterm service as a non-privileged, local user. A successful exploit could allow the attacker to gain root access to all member nodes of the HyperFlex cluster. This vulnerability affects Cisco HyperFlex Software Releases prior to 3.5(2a). |
Risk And Classification
Problem Types: CWE-287
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6(1a) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6(1b) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6(1d) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6(1e) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1a\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1b\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1d\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1e\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0(1a) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0(1b) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0(1c) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0(1d) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0(1e) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0(1h) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0(1i) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1a\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1b\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1c\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1d\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1e\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1h\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1i\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.5(1a) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.5\(1a\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1a\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1b\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1d\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 2.6\(1e\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1a\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1b\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1c\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1d\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1e\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1h\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.0\(1i\) | All | All | All |
| Operating System | Cisco | Hyperflex Hx Data Platform | 3.5\(1a\) | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Cisco HyperFlex Software CVE-2019-1664 Local Access Bypass Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| Cisco HyperFlex Software Unauthenticated Root Access Vulnerability | CISCO | tools.cisco.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.