Lucene search
CiscoCISCO-SA-20190515-NXOS-CMDINJ-1795HistoryMay 15, 2019 - 4:00 p.m.
Cisco FXOS and NX-OS Software Command Injection Vulnerability (CVE-2019-1795)
2019-05-1516:00:00
tools.cisco.com
20
0.0004 Low
EPSS
Percentile
5.1%
A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root.
The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-cmdinj-1795 [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-cmdinj-1795”]
Affected configurations
Node
cisconx_osMatch5.2(1)SV3
ORcisconx_osMatch6.0(2)A8
ORcisconx_osMatch6.2
ORcisconx_osMatch7.0(3)F3
ORcisconx_osMatch7.0(3)I4
ORcisconx_osMatch7.0(3)I7
ORcisconx_osMatch7.3(2)D1
ORcisconx_osMatch8.2
ORciscounified_computing_systemMatchany
ORciscofirepower_extensible_operating_systemMatch2.0
ORciscofirepower_extensible_operating_systemMatch2.2
ORciscofirepower_extensible_operating_systemMatch2.3
ORcisconx_osMatch5.2(1)SV3(1.4)
ORcisconx_osMatch5.2(1)SV3(1.1)
ORcisconx_osMatch5.2(1)SV3(1.3)
ORcisconx_osMatch5.2(1)SV3(1.5a)
ORcisconx_osMatch5.2(1)SV3(1.5b)
ORcisconx_osMatch5.2(1)SV3(1.6)
ORcisconx_osMatch5.2(1)SV3(1.10)
ORcisconx_osMatch5.2(1)SV3(1.15)
ORcisconx_osMatch5.2(1)SV3(2.1)
ORcisconx_osMatch5.2(1)SV3(2.5)
ORcisconx_osMatch5.2(1)SV3(2.8)
ORcisconx_osMatch5.2(1)SV3(3.1)
ORcisconx_osMatch5.2(1)SV3(1.2)
ORcisconx_osMatch5.2(1)SV3(1.4b)
ORcisconx_osMatch5.2(1)SV3(3.15)
ORcisconx_osMatch5.2(1)SV3(1.3a)
ORcisconx_osMatch5.2(1)SV3(1.3b)
ORcisconx_osMatch5.2(1)SV3(1.3c)
ORcisconx_osMatch6.0(2)A8(1)
ORcisconx_osMatch6.0(2)A8(2)
ORcisconx_osMatch6.0(2)A8(3)
ORcisconx_osMatch6.0(2)A8(4)
ORcisconx_osMatch6.0(2)A8(4a)
ORcisconx_osMatch6.0(2)A8(5)
ORcisconx_osMatch6.0(2)A8(6)
ORcisconx_osMatch6.0(2)A8(7)
ORcisconx_osMatch6.0(2)A8(7a)
ORcisconx_osMatch6.0(2)A8(7b)
ORcisconx_osMatch6.0(2)A8(8)
ORcisconx_osMatch6.0(2)A8(9)
ORcisconx_osMatch6.0(2)A8(10a)
ORcisconx_osMatch6.0(2)A8(10)
ORcisconx_osMatch6.2(2)
ORcisconx_osMatch6.2(2a)
ORcisconx_osMatch6.2(6)
ORcisconx_osMatch6.2(6b)
ORcisconx_osMatch6.2(8)
ORcisconx_osMatch6.2(8a)
ORcisconx_osMatch6.2(8b)
ORcisconx_osMatch6.2(10)
ORcisconx_osMatch6.2(12)
ORcisconx_osMatch6.2(18)
ORcisconx_osMatch6.2(16)
ORcisconx_osMatch6.2(14b)
ORcisconx_osMatch6.2(14)
ORcisconx_osMatch6.2(14a)
ORcisconx_osMatch6.2(6a)
ORcisconx_osMatch6.2(20)
ORcisconx_osMatch6.2(1)
ORcisconx_osMatch6.2(3)
ORcisconx_osMatch6.2(5)
ORcisconx_osMatch6.2(5a)
ORcisconx_osMatch6.2(5b)
ORcisconx_osMatch6.2(7)
ORcisconx_osMatch6.2(9)
ORcisconx_osMatch6.2(9a)
ORcisconx_osMatch6.2(9b)
ORcisconx_osMatch6.2(9c)
ORcisconx_osMatch6.2(11)
ORcisconx_osMatch6.2(11b)
ORcisconx_osMatch6.2(11c)
ORcisconx_osMatch6.2(11d)
ORcisconx_osMatch6.2(11e)
ORcisconx_osMatch6.2(13)
ORcisconx_osMatch6.2(13a)
ORcisconx_osMatch6.2(13b)
ORcisconx_osMatch6.2(15)
ORcisconx_osMatch6.2(17)
ORcisconx_osMatch6.2(19)
ORcisconx_osMatch6.2(21)
ORcisconx_osMatch6.2(20a)
ORcisconx_osMatch7.0(3)F3(1)
ORcisconx_osMatch7.0(3)F3(2)
ORcisconx_osMatch7.0(3)F3(3)
ORcisconx_osMatch7.0(3)I4(1)
ORcisconx_osMatch7.0(3)I4(2)
ORcisconx_osMatch7.0(3)I4(3)
ORcisconx_osMatch7.0(3)I4(4)
ORcisconx_osMatch7.0(3)I4(5)
ORcisconx_osMatch7.0(3)I4(6)
ORcisconx_osMatch7.0(3)I4(7)
ORcisconx_osMatch7.0(3)I7(5a)
ORcisconx_osMatch7.0(3)I7(1)
ORcisconx_osMatch7.0(3)I7(2)
ORcisconx_osMatch7.3(2)D1(1A)
ORcisconx_osMatch7.3(2)D1(1)
ORcisconx_osMatch7.3(2)D1(2)
ORcisconx_osMatch8.2(1)
ORcisconx_osMatch8.2(2)
ORciscounified_computing_systemMatchany
ORciscofirepower_extensible_operating_systemMatch2.0.1.68
ORciscofirepower_extensible_operating_systemMatch2.0.1.86
ORciscofirepower_extensible_operating_systemMatch2.0.1.37
ORciscofirepower_extensible_operating_systemMatch2.0.1.135
ORciscofirepower_extensible_operating_systemMatch2.0.1.141
ORciscofirepower_extensible_operating_systemMatch2.0.1.144
ORciscofirepower_extensible_operating_systemMatch2.0.1.148
ORciscofirepower_extensible_operating_systemMatch2.0.1.149
ORciscofirepower_extensible_operating_systemMatch2.0.1.153
ORciscofirepower_extensible_operating_systemMatch2.0.1.159
ORciscofirepower_extensible_operating_systemMatch2.0.1.188
ORciscofirepower_extensible_operating_systemMatch2.2.1.63
ORciscofirepower_extensible_operating_systemMatch2.2.1.66
ORciscofirepower_extensible_operating_systemMatch2.2.1.70
ORciscofirepower_extensible_operating_systemMatch2.2.2.17
ORciscofirepower_extensible_operating_systemMatch2.2.2.19
ORciscofirepower_extensible_operating_systemMatch2.2.2.24
ORciscofirepower_extensible_operating_systemMatch2.2.2.26
ORciscofirepower_extensible_operating_systemMatch2.2.2.28
ORciscofirepower_extensible_operating_systemMatch2.3.1.66
ORciscofirepower_extensible_operating_systemMatch2.3.1.58
Related
nvd
nvd
CVE-2019-1795
2019-05-15 21:29:03
cvelist
cvelist
CVE-2019-1795 Cisco FXOS and NX-OS Software Command Injection Vulnerability
2019-05-15 00:00:00
nessus
nessus
Cisco FXOS Software Command Injection (cisco-sa-20190515-nxos-cmdinj-1795)
2019-12-04 00:00:00
Cisco NX-OS Software Command Injection (cisco-sa-20190515-nxos-cmdinj-1795)
2019-12-04 00:00:00
prion
prion
Input validation
2019-05-15 21:29:00
cve
cve
CVE-2019-1795
2019-05-15 21:29:03
cisco
cisco
Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1776)
2019-05-15 16:00:00
Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735)
2019-05-15 16:00:00
Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1790)
2019-05-15 16:00:00