Lucene search

CiscoCISCO-SA-20190515-FXOS-NXOS-CMDINJ-1781-1782

HistoryMay 15, 2019 - 4:00 p.m.

Cisco FXOS and NX-OS Software Command Injection Vulnerabilities (CVE-2019-1781, CVE-2019-1782)

2019-05-1516:00:00

tools.cisco.com

0.0004 Low

EPSS

Percentile

5.1%

JSON

Multiple vulnerabilities in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device.

These vulnerabilities are due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit these vulnerabilities by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need administrator credentials to exploit these vulnerabilities.

Cisco has released software updates that address these vulnerabilities. There are no workarounds that address these vulnerabilities.

This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-fxos-nxos-cmdinj-1781-1782 [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-fxos-nxos-cmdinj-1781-1782”]

Affected configurations

Vulners

Node

cisconx_osMatch6.0

cisconx_osMatch6.0(2)A1

cisconx_osMatch6.0(2)A3

cisconx_osMatch6.0(2)A4

cisconx_osMatch6.0(2)A6

cisconx_osMatch6.0(2)A7

cisconx_osMatch6.0(2)A8

cisconx_osMatch6.2

cisconx_osMatch7.0

cisconx_osMatch7.0(0)N1

cisconx_osMatch7.0(1)N1

cisconx_osMatch7.0(2)I2

cisconx_osMatch7.0(2)N1

cisconx_osMatch7.0(3)F1

cisconx_osMatch7.0(3)F2

cisconx_osMatch7.0(3)F3

cisconx_osMatch7.0(3)I1

cisconx_osMatch7.0(3)I2

cisconx_osMatch7.0(3)I3

cisconx_osMatch7.0(3)I4

cisconx_osMatch7.0(3)I5

cisconx_osMatch7.0(3)I6

cisconx_osMatch7.0(3)I7

cisconx_osMatch7.3

cisconx_osMatch7.3(0)D1

cisconx_osMatch7.3(0)DX

cisconx_osMatch7.3(0)DY

cisconx_osMatch7.3(0)N1

cisconx_osMatch7.3(1)D1

cisconx_osMatch7.3(1)DY

cisconx_osMatch7.3(1)N1

cisconx_osMatch7.3(2)D1

cisconx_osMatch7.3(2)N1

cisconx_osMatch7.3(3)N1

cisconx_osMatch8.2

cisconx_osMatch7.3(3)D1

cisconx_osMatchany

ciscofirepower_extensible_operating_systemMatch2.2

ciscofirepower_extensible_operating_systemMatch2.3

ciscofirepower_extensible_operating_systemMatch2.4

ciscofirepower_extensible_operating_systemMatchany

cisconx_osMatch6.0(1)

cisconx_osMatch6.0(2)

cisconx_osMatch6.0(3)

cisconx_osMatch6.0(4)

cisconx_osMatch6.0(2)A1(1)

cisconx_osMatch6.0(2)A1(1a)

cisconx_osMatch6.0(2)A1(1b)

cisconx_osMatch6.0(2)A1(1c)

cisconx_osMatch6.0(2)A1(1d)

cisconx_osMatch6.0(2)A1(1e)

cisconx_osMatch6.0(2)A1(1f)

cisconx_osMatch6.0(2)A1(2d)

cisconx_osMatch6.0(2)A3(1)

cisconx_osMatch6.0(2)A3(2)

cisconx_osMatch6.0(2)A3(4)

cisconx_osMatch6.0(2)A4(1)

cisconx_osMatch6.0(2)A4(2)

cisconx_osMatch6.0(2)A4(3)

cisconx_osMatch6.0(2)A4(4)

cisconx_osMatch6.0(2)A4(5)

cisconx_osMatch6.0(2)A4(6)

cisconx_osMatch6.0(2)A6(1)

cisconx_osMatch6.0(2)A6(1a)

cisconx_osMatch6.0(2)A6(2)

cisconx_osMatch6.0(2)A6(2a)

cisconx_osMatch6.0(2)A6(3)

cisconx_osMatch6.0(2)A6(3a)

cisconx_osMatch6.0(2)A6(4)

cisconx_osMatch6.0(2)A6(4a)

cisconx_osMatch6.0(2)A6(5)

cisconx_osMatch6.0(2)A6(5a)

cisconx_osMatch6.0(2)A6(5b)

cisconx_osMatch6.0(2)A6(6)

cisconx_osMatch6.0(2)A6(7)

cisconx_osMatch6.0(2)A6(8)

cisconx_osMatch6.0(2)A7(1)

cisconx_osMatch6.0(2)A7(1a)

cisconx_osMatch6.0(2)A7(2)

cisconx_osMatch6.0(2)A7(2a)

cisconx_osMatch6.0(2)A8(1)

cisconx_osMatch6.0(2)A8(2)

cisconx_osMatch6.0(2)A8(3)

cisconx_osMatch6.0(2)A8(4)

cisconx_osMatch6.0(2)A8(4a)

cisconx_osMatch6.0(2)A8(5)

cisconx_osMatch6.0(2)A8(6)

cisconx_osMatch6.0(2)A8(7)

cisconx_osMatch6.0(2)A8(7a)

cisconx_osMatch6.0(2)A8(7b)

cisconx_osMatch6.0(2)A8(8)

cisconx_osMatch6.0(2)A8(9)

cisconx_osMatch6.0(2)A8(10a)

cisconx_osMatch6.0(2)A8(10)

cisconx_osMatch6.2(2)

cisconx_osMatch6.2(2a)

cisconx_osMatch6.2(6)

cisconx_osMatch6.2(6b)

cisconx_osMatch6.2(8)

cisconx_osMatch6.2(8a)

cisconx_osMatch6.2(8b)

cisconx_osMatch6.2(10)

cisconx_osMatch6.2(12)

cisconx_osMatch6.2(18)

cisconx_osMatch6.2(16)

cisconx_osMatch6.2(14b)

cisconx_osMatch6.2(14)

cisconx_osMatch6.2(14a)

cisconx_osMatch6.2(6a)

cisconx_osMatch6.2(20)

cisconx_osMatch6.2(1)

cisconx_osMatch6.2(3)

cisconx_osMatch6.2(5)

cisconx_osMatch6.2(5a)

cisconx_osMatch6.2(5b)

cisconx_osMatch6.2(7)

cisconx_osMatch6.2(9)

cisconx_osMatch6.2(9a)

cisconx_osMatch6.2(9b)

cisconx_osMatch6.2(9c)

cisconx_osMatch6.2(11)

cisconx_osMatch6.2(11b)

cisconx_osMatch6.2(11c)

cisconx_osMatch6.2(11d)

cisconx_osMatch6.2(11e)

cisconx_osMatch6.2(13)

cisconx_osMatch6.2(13a)

cisconx_osMatch6.2(13b)

cisconx_osMatch6.2(15)

cisconx_osMatch6.2(17)

cisconx_osMatch6.2(19)

cisconx_osMatch6.2(21)

cisconx_osMatch6.2(20a)

cisconx_osMatch7.0(3)

cisconx_osMatch7.0(0)N1(1)

cisconx_osMatch7.0(1)N1(1)

cisconx_osMatch7.0(1)N1(3)

cisconx_osMatch7.0(2)I2(2c)

cisconx_osMatch7.0(2)N1(1)

cisconx_osMatch7.0(2)N1(1a)

cisconx_osMatch7.0(3)F1(1)

cisconx_osMatch7.0(3)F2(1)

cisconx_osMatch7.0(3)F2(2)

cisconx_osMatch7.0(3)F3(1)

cisconx_osMatch7.0(3)F3(2)

cisconx_osMatch7.0(3)F3(3)

cisconx_osMatch7.0(3)F3(3a)

cisconx_osMatch7.0(3)F3(4)

cisconx_osMatch7.0(3)F3(3c)

cisconx_osMatch7.0(3)F3(3b)

cisconx_osMatch7.0(3)F3(5)

cisconx_osMatch7.0(3)I1(1)

cisconx_osMatch7.0(3)I1(1a)

cisconx_osMatch7.0(3)I1(1b)

cisconx_osMatch7.0(3)I1(2)

cisconx_osMatch7.0(3)I1(3)

cisconx_osMatch7.0(3)I1(3a)

cisconx_osMatch7.0(3)I1(3b)

cisconx_osMatch7.0(3)I2(2a)

cisconx_osMatch7.0(3)I2(2b)

cisconx_osMatch7.0(3)I2(2c)

cisconx_osMatch7.0(3)I2(2d)

cisconx_osMatch7.0(3)I2(2e)

cisconx_osMatch7.0(3)I2(3)

cisconx_osMatch7.0(3)I2(4)

cisconx_osMatch7.0(3)I2(5)

cisconx_osMatch7.0(3)I2(1)

cisconx_osMatch7.0(3)I2(1a)

cisconx_osMatch7.0(3)I2(2)

cisconx_osMatch7.0(3)I3(1)

cisconx_osMatch7.0(3)I4(1)

cisconx_osMatch7.0(3)I4(2)

cisconx_osMatch7.0(3)I4(3)

cisconx_osMatch7.0(3)I4(4)

cisconx_osMatch7.0(3)I4(5)

cisconx_osMatch7.0(3)I4(6)

cisconx_osMatch7.0(3)I4(7)

cisconx_osMatch7.0(3)I4(8)

cisconx_osMatch7.0(3)I4(8a)

cisconx_osMatch7.0(3)I4(8b)

cisconx_osMatch7.0(3)I4(8z)

cisconx_osMatch7.0(3)I7(5a)

cisconx_osMatch7.0(3)I5(1)

cisconx_osMatch7.0(3)I5(2)

cisconx_osMatch7.0(3)I6(1)

cisconx_osMatch7.0(3)I6(2)

cisconx_osMatch7.0(3)I7(1)

cisconx_osMatch7.0(3)I7(2)

cisconx_osMatch7.0(3)I7(3)

cisconx_osMatch7.3(0.2)

cisconx_osMatch7.3(0)D1(1)

cisconx_osMatch7.3(0)DX(1)

cisconx_osMatch7.3(0)DY(1)

cisconx_osMatch7.3(0)N1(1)

cisconx_osMatch7.3(0)N1(1b)

cisconx_osMatch7.3(0)N1(1a)

cisconx_osMatch7.3(1)D1(1B)

cisconx_osMatch7.3(1)D1(1)

cisconx_osMatch7.3(1)DY(1)

cisconx_osMatch7.3(1)N1(0.1)

cisconx_osMatch7.3(1)N1(1)

cisconx_osMatch7.3(2)D1(1A)

cisconx_osMatch7.3(2)D1(1)

cisconx_osMatch7.3(2)D1(2)

cisconx_osMatch7.3(2)D1(3)

cisconx_osMatch7.3(2)D1(3a)

cisconx_osMatch7.3(2)N1(0.296)

cisconx_osMatch7.3(2)N1(1)

cisconx_osMatch7.3(3)N1(1)

cisconx_osMatch8.2(1)

cisconx_osMatch8.2(2)

cisconx_osMatch7.3(3)D1(1)

cisconx_osMatchany

ciscofirepower_extensible_operating_systemMatch2.2.1.63

ciscofirepower_extensible_operating_systemMatch2.2.1.66

ciscofirepower_extensible_operating_systemMatch2.2.1.70

ciscofirepower_extensible_operating_systemMatch2.2.2.17

ciscofirepower_extensible_operating_systemMatch2.2.2.19

ciscofirepower_extensible_operating_systemMatch2.2.2.24

ciscofirepower_extensible_operating_systemMatch2.2.2.26

ciscofirepower_extensible_operating_systemMatch2.2.2.28

ciscofirepower_extensible_operating_systemMatch2.2.2.54

ciscofirepower_extensible_operating_systemMatch2.2.2.60

ciscofirepower_extensible_operating_systemMatch2.2.2.71

ciscofirepower_extensible_operating_systemMatch2.2.2.83

ciscofirepower_extensible_operating_systemMatch2.2.2.86

ciscofirepower_extensible_operating_systemMatch2.3.1.99

ciscofirepower_extensible_operating_systemMatch2.3.1.93

ciscofirepower_extensible_operating_systemMatch2.3.1.91

ciscofirepower_extensible_operating_systemMatch2.3.1.88

ciscofirepower_extensible_operating_systemMatch2.3.1.75

ciscofirepower_extensible_operating_systemMatch2.3.1.73

ciscofirepower_extensible_operating_systemMatch2.3.1.66

ciscofirepower_extensible_operating_systemMatch2.3.1.58

ciscofirepower_extensible_operating_systemMatch2.3.1.111

ciscofirepower_extensible_operating_systemMatch2.3.1.110

ciscofirepower_extensible_operating_systemMatch2.4.1.101

ciscofirepower_extensible_operating_systemMatch2.4.1.214

ciscofirepower_extensible_operating_systemMatchany

CPENameOperatorVersion
cisco nx-os softwareeq6.0
cisco nx-os softwareeq6.0(2)A1
cisco nx-os softwareeq6.0(2)A3
cisco nx-os softwareeq6.0(2)A4
cisco nx-os softwareeq6.0(2)A6
cisco nx-os softwareeq6.0(2)A7
cisco nx-os softwareeq6.0(2)A8
cisco nx-os softwareeq6.2
cisco nx-os softwareeq7.0
cisco nx-os softwareeq7.0(0)N1

Name	Operator	Version
cisco nx-os software	eq	6.0
cisco nx-os software	eq	6.0(2)A1
cisco nx-os software	eq	6.0(2)A3
cisco nx-os software	eq	6.0(2)A4
cisco nx-os software	eq	6.0(2)A6
cisco nx-os software	eq	6.0(2)A7
cisco nx-os software	eq	6.0(2)A8
cisco nx-os software	eq	6.2
cisco nx-os software	eq	7.0
cisco nx-os software	eq	7.0(0)N1