Cisco NX-OS CVE-2019-1608 Local Command Injection Vulnerability

Bugtraq ID:	107386
Class:	Input Validation Error
CVE:	CVE-2019-1608
Remote:	No
Local:	Yes
Published:	Mar 06 2019 12:00AM
Updated:	Mar 06 2019 12:00AM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 8.3 Cisco NX-OS 8.2 Cisco NX-OS 8.1 Cisco NX-OS 7.3 Cisco NX-OS 6.2 Cisco NX-OS 5.2 Cisco Nexus 9500 R-Series Line Cards and Fabric Modules 0 Cisco Nexus 9000 Series Switches in standalone NX-OS mode 0 Cisco Nexus 9000 Series Fabric Switches - ACI mode 0 Cisco Nexus 3000 Series Switches 0
Not Vulnerable:	Cisco NX-OS 8.3(2) Cisco NX-OS 8.2(3) Cisco NX-OS 6.2(27) Cisco NX-OS 6.2(22)

Cisco NX-OS CVE-2019-1608 Local Command Injection Vulnerability

Cisco NX-OS is prone to a local command-injection vulnerability

An attacker may exploit this issue to execute arbitrary commands on the underlying operating system with elevated privileges.

This issue being tracked by Cisco Bug ID CSCvi01422.

Cisco NX-OS CVE-2019-1608 Local Command Injection Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.