Cisco NX-OS CVE-2019-1609 Local Command Injection Vulnerability
BID:107341
CVE-2019-1609 |Info
Cisco NX-OS CVE-2019-1609 Local Command Injection Vulnerability
| Bugtraq ID: | 107341 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1609 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 06 2019 12:00AM |
| Updated: | Mar 06 2019 12:00AM |
| Credit: | Cisco |
| Vulnerable: |
Cisco NX-OS 8.3 Cisco NX-OS 8.2 Cisco NX-OS 8.1 Cisco NX-OS 7.3 Cisco NX-OS 7.0(3)I7 Cisco NX-OS 7.0(3)I6 Cisco NX-OS 7.0(3)I5 Cisco NX-OS 7.0(3)I4 Cisco NX-OS 7.0(3)F3 Cisco NX-OS 7.0(3) Cisco NX-OS 6.2 Cisco NX-OS 5.2 Cisco Nexus 9500 R-Series Line Cards and Fabric Modules 0 Cisco Nexus 9000 Series Switches in standalone NX-OS mode 0 Cisco Nexus 7700 Series Switches 0 Cisco Nexus 7000 Series Switches 0 Cisco Nexus 3600 Platform Switches 0 Cisco Nexus 3500 Platform Switches 0 Cisco Nexus 3000 Series Switches 0 Cisco MDS 9000 Series Multilayer Switches 0 |
| Not Vulnerable: |
Cisco NX-OS 8.3(2) Cisco NX-OS 8.2(3) Cisco NX-OS 7.0(3)I7(6) Cisco NX-OS 7.0(3)I4(9) Cisco NX-OS 7.0(3)F3(5) Cisco NX-OS 6.2(27) Cisco NX-OS 6.2(22) |
Discussion
Cisco NX-OS CVE-2019-1609 Local Command Injection Vulnerability
Cisco NX-OS is prone to a local command-injection vulnerability
An attacker may exploit this issue to inject and execute arbitrary commands with root-level privileges; this may aid in further attacks.
This issue being tracked by Cisco Bug ID CSCvj63253, CSCvk51387, CSCvk51388.
Cisco NX-OS is prone to a local command-injection vulnerability
An attacker may exploit this issue to inject and execute arbitrary commands with root-level privileges; this may aid in further attacks.
This issue being tracked by Cisco Bug ID CSCvj63253, CSCvk51387, CSCvk51388.
References
Cisco NX-OS CVE-2019-1609 Local Command Injection Vulnerability
References:
References: