Lucene search
CiscoCISCO-SA-20190515-NXOS-SPSVHistoryMay 15, 2019 - 4:00 p.m.
Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability
2019-05-1516:00:00
tools.cisco.com
31
EPSS
0
Percentile
5.1%
A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device.
The vulnerability is due to improper verification of digital signatures for patch images. An attacker could exploit this vulnerability by loading an unsigned software patch on an affected device. A successful exploit could allow the attacker to boot a malicious software patch image.
Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability.
This advisory is available at the following link:
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-spsv [“https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-spsv”]
Affected configurations
Node
ciscocisco_nx-os_softwareMatch7.0
ORciscocisco_nx-os_softwareMatch7.0\(0\)n1
ORciscocisco_nx-os_softwareMatch7.0\(1\)n1
ORciscocisco_nx-os_softwareMatch7.0\(2\)i2
ORciscocisco_nx-os_softwareMatch7.0\(2\)n1
ORciscocisco_nx-os_softwareMatch7.0\(3\)f1
ORciscocisco_nx-os_softwareMatch7.0\(3\)f2
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2
ORciscocisco_nx-os_softwareMatch7.0\(3\)i3
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4
ORciscocisco_nx-os_softwareMatch7.0\(3\)i5
ORciscocisco_nx-os_softwareMatch7.0\(3\)i6
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7
ORciscocisco_nx-os_softwareMatch7.0\(3\)ix1
ORciscocisco_nx-os_softwareMatch7.0\(3\)n1
ORciscocisco_nx-os_softwareMatch7.0\(4\)n1
ORciscocisco_nx-os_softwareMatch7.0\(5\)n1
ORciscocisco_nx-os_softwareMatch7.0\(6\)n1
ORciscocisco_nx-os_softwareMatch7.0\(7\)n1
ORciscocisco_nx-os_softwareMatch7.0\(8\)n1
ORciscocisco_nx-os_softwareMatch7.1\(0\)n1
ORciscocisco_nx-os_softwareMatch7.1\(1\)n1
ORciscocisco_nx-os_softwareMatch7.1\(2\)n1
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1
ORciscocisco_nx-os_softwareMatch7.1\(4\)n1
ORciscocisco_nx-os_softwareMatch7.1\(5\)n1
ORciscocisco_nx-os_softwareMatch7.2\(0\)d1
ORciscocisco_nx-os_softwareMatch7.2\(0\)n1
ORciscocisco_nx-os_softwareMatch7.2\(0\)zz
ORciscocisco_nx-os_softwareMatch7.2\(1\)d1
ORciscocisco_nx-os_softwareMatch7.2\(1\)n1
ORciscocisco_nx-os_softwareMatch7.2\(2\)d1
ORciscocisco_nx-os_softwareMatch7.3
ORciscocisco_nx-os_softwareMatch7.3\(0\)d1
ORciscocisco_nx-os_softwareMatch7.3\(0\)dx
ORciscocisco_nx-os_softwareMatch7.3\(0\)dy
ORciscocisco_nx-os_softwareMatch7.3\(0\)n1
ORciscocisco_nx-os_softwareMatch7.3\(1\)d1
ORciscocisco_nx-os_softwareMatch7.3\(1\)dy
ORciscocisco_nx-os_softwareMatch7.3\(1\)n1
ORciscocisco_nx-os_softwareMatch7.3\(2\)d1
ORciscocisco_nx-os_softwareMatch7.3\(2\)n1
ORciscocisco_nx-os_softwareMatch8.2
ORciscocisco_nx-os_softwareMatch7.0\(3\)
ORciscocisco_nx-os_softwareMatch7.0\(0\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(1\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(1\)n1\(3\)
ORciscocisco_nx-os_softwareMatch7.0\(2\)i2\(2c\)
ORciscocisco_nx-os_softwareMatch7.0\(2\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(2\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f2\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f2\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(3\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(3a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(4\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(3c\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(3b\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)f3\(5\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1\(1a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1\(1b\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1\(3\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1\(3a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i1\(3b\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(2a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(2b\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(2c\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(2d\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(2e\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(3\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(4\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(5\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(1a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i2\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i3\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(3\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(4\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(5\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(6\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(7\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(8\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(8a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(8b\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i4\(8z\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7\(5a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i5\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i5\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i6\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i6\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7\(3\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7\(4\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7\(5\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)i7\(5a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)ix1\(2\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)ix1\(2a\)
ORciscocisco_nx-os_softwareMatch7.0\(3\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(4\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(4\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.0\(5\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(5\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.0\(6\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(6\)n1\(4s\)
ORciscocisco_nx-os_softwareMatch7.0\(6\)n1\(3s\)
ORciscocisco_nx-os_softwareMatch7.0\(6\)n1\(2s\)
ORciscocisco_nx-os_softwareMatch7.0\(6\)n1\(1c\)
ORciscocisco_nx-os_softwareMatch7.0\(7\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(7\)n1\(1b\)
ORciscocisco_nx-os_softwareMatch7.0\(7\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.0\(8\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.0\(8\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.1\(0\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.1\(0\)n1\(1b\)
ORciscocisco_nx-os_softwareMatch7.1\(0\)n1\(2\)
ORciscocisco_nx-os_softwareMatch7.1\(0\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.1\(1\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.1\(1\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.1\(2\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.1\(2\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(2\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(2.1\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(3.12\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(5\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(4\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(3\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(2a\)
ORciscocisco_nx-os_softwareMatch7.1\(3\)n1\(1b\)
ORciscocisco_nx-os_softwareMatch7.1\(4\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.1\(4\)n1\(1d\)
ORciscocisco_nx-os_softwareMatch7.1\(4\)n1\(1c\)
ORciscocisco_nx-os_softwareMatch7.1\(4\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.1\(4\)n1\(1e\)
ORciscocisco_nx-os_softwareMatch7.1\(5\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.1\(5\)n1\(1b\)
ORciscocisco_nx-os_softwareMatch7.2\(0\)d1\(0.437\)
ORciscocisco_nx-os_softwareMatch7.2\(0\)d1\(1\)
ORciscocisco_nx-os_softwareMatch7.2\(0\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.2\(0\)zz\(99.1\)
ORciscocisco_nx-os_softwareMatch7.2\(1\)d1\(1\)
ORciscocisco_nx-os_softwareMatch7.2\(1\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.2\(2\)d1\(2\)
ORciscocisco_nx-os_softwareMatch7.2\(2\)d1\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(0.2\)
ORciscocisco_nx-os_softwareMatch7.3\(0\)d1\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(0\)dx\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(0\)dy\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(0\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(0\)n1\(1b\)
ORciscocisco_nx-os_softwareMatch7.3\(0\)n1\(1a\)
ORciscocisco_nx-os_softwareMatch7.3\(1\)d1\(1b\)
ORciscocisco_nx-os_softwareMatch7.3\(1\)d1\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(1\)dy\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(1\)n1\(0.1\)
ORciscocisco_nx-os_softwareMatch7.3\(1\)n1\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(2\)d1\(1a\)
ORciscocisco_nx-os_softwareMatch7.3\(2\)d1\(1\)
ORciscocisco_nx-os_softwareMatch7.3\(2\)d1\(2\)
ORciscocisco_nx-os_softwareMatch7.3\(2\)d1\(3\)
ORciscocisco_nx-os_softwareMatch7.3\(2\)d1\(3a\)
ORciscocisco_nx-os_softwareMatch7.3\(2\)n1\(0.296\)
ORciscocisco_nx-os_softwareMatch7.3\(2\)n1\(1\)
ORciscocisco_nx-os_softwareMatch8.2\(1\)
ORciscocisco_nx-os_softwareMatch8.2\(2\)
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | cisco_nx-os_software | 7.0 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(0)n1 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(0\)n1:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(1)n1 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(1\)n1:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(2)i2 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(2\)i2:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(2)n1 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(2\)n1:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(3)f1 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(3\)f1:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(3)f2 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(3\)f2:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(3)f3 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(3\)f3:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(3)i1 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(3\)i1:*:*:*:*:*:*:* |
| cisco | cisco_nx-os_software | 7.0(3)i2 | cpe:2.3:a:cisco:cisco_nx-os_software:7.0\(3\)i2:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2019-1808
2019-05-15 23:29:01
nvd
nvd
CVE-2019-1808
2019-05-15 23:29:01
cvelist
cvelist
nessus
nessus
prion
prion
Input validation
2019-05-15 23:29:00