Cisco NX-OS Software CVE-2019-1727 Local Privilege Escalation Vulnerability

Bugtraq ID:	108341
Class:	Input Validation Error
CVE:	CVE-2019-1727
Remote:	No
Local:	Yes
Published:	May 15 2019 12:00AM
Updated:	May 15 2019 12:00AM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 8.3 Cisco NX-OS 8.2 Cisco NX-OS 8.1 Cisco NX-OS 8.0 Cisco NX-OS 7.3 Cisco NX-OS 7.2 Cisco NX-OS 7.1 Cisco NX-OS 7.0(3)I7 Cisco NX-OS 7.0(3)I6 Cisco NX-OS 7.0(3)I5 Cisco NX-OS 7.0(3)I4 Cisco NX-OS 7.0(3) Cisco NX-OS 7 Cisco NX-OS 6.2 Cisco NX-OS 5.2 Cisco Nexus 9500 R-Series Switching Platform 0 Cisco Nexus 9000 Series Switches in standalone NX-OS mode 0 Cisco Nexus 7700 Series Switches 0 Cisco Nexus 7000 Series Switches 0 Cisco Nexus 6000 Series Switches 0 Cisco Nexus 5600 Platform Switches 0 Cisco Nexus 5500 Platform Switches 0 Cisco Nexus 3600 Platform Switches 0 Cisco Nexus 3500 Platform Switches 0 Cisco Nexus 3000 Series Switches 0 Cisco MDS 9000 Series Multilayer Switches 0
Not Vulnerable:	Cisco NX-OS 8.3(1) Cisco NX-OS 8.1(1b) Cisco NX-OS 7.3(4)N1(1) Cisco NX-OS 7.3(3)D1(1) Cisco NX-OS 7.0(3)I7(3) Cisco NX-OS 7.0(3)I4(8) Cisco NX-OS 7.0(3)F3(5)

Cisco NX-OS Software CVE-2019-1727 Local Privilege Escalation Vulnerability

Cisco NX-OS Software for Nexus Series Switches is prone to a local privilege-escalation vulnerability.

Local attackers may exploit this issue to gain elevated privileges.

This issue is being tracked by Cisco Bug IDs CSCvh24788, CSCvi99282, CSCvi99284, CSCvi99288.

Cisco NX-OS Software CVE-2019-1727 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco NX-OS Software CVE-2019-1727 Local Privilege Escalation Vulnerability

References:

• Cisco Homepage (Cisco )
  
• Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability (Cisco)