CVE-2019-12717

🗓️ 25 Sep 2019 20:16:02Reported by ciscoType

A vulnerability in Cisco NX-OS Software allows local attacker to execute arbitrary commands

Reporter	Title	Published	Views	Family All 9
Cisco	Cisco NX-OS Software Virtualization Manager Command Injection Vulnerability	25 Sep 201916:00	–	cisco
Tenable Nessus	Cisco NX-OS Software Command Injection Vulnerability (cisco-sa-20190925-nxos-vman-cmd-inj)	4 Oct 201900:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Virtualization Manager Command Injection (CVE-2019-12717)	25 Jul 202300:00	–	nessus
CNVD	Cisco NX-OS Software Operating System Command Injection Vulnerability	26 Sep 201900:00	–	cnvd
Cvelist	CVE-2019-12717 Cisco NX-OS Software Virtualization Manager Command Injection Vulnerability	25 Sep 201920:16	–	cvelist
EUVD	EUVD-2019-4308	7 Oct 202500:30	–	euvd
NVD	CVE-2019-12717	25 Sep 201921:15	–	nvd
Prion	Input validation	25 Sep 201921:15	–	prion
Vulnrichment	CVE-2019-12717 Cisco NX-OS Software Virtualization Manager Command Injection Vulnerability	25 Sep 201920:16	–	vulnrichment

NVD

Node

cisco nx-osRange6.0(2)–7.0(3)i7(6)

cisco nx-osRange9.2–9.2(3)

AND

cisco nexus_3016Match-

cisco nexus_3048Match-

cisco nexus_3064Match-

cisco nexus_3064-tMatch-

cisco nexus_31108pc-vMatch-

cisco nexus_31108tc-vMatch-

cisco nexus_31128pqMatch-

cisco nexus_3132c-zMatch-

cisco nexus_3132qMatch-

cisco nexus_3132q-vMatch-

cisco nexus_3132q-xlMatch-

cisco nexus_3164qMatch-

cisco nexus_3172Match-

cisco nexus_3172pq-xlMatch-

cisco nexus_3172tqMatch-

cisco nexus_3172tq-32tMatch-

cisco nexus_3172tq-xlMatch-

cisco nexus_3232cMatch-

cisco nexus_3264c-eMatch-

cisco nexus_3264qMatch-

cisco nexus_3408-sMatch-

cisco nexus_34180ycMatch-

cisco nexus_3432d-sMatch-

cisco nexus_3464cMatch-

cisco nexus_3524Match-

cisco nexus_3524-xMatch-

cisco nexus_3524-xlMatch-

cisco nexus_3548Match-

cisco nexus_3548-xMatch-

cisco nexus_3548-xlMatch-

cisco nexus_9000vMatch-

cisco nexus_92160yc-xMatch-

cisco nexus_92300ycMatch-

cisco nexus_92304qcMatch-

cisco nexus_92348gc-xMatch-

cisco nexus_9236cMatch-

cisco nexus_9272qMatch-

cisco nexus_93108tc-exMatch-

cisco nexus_93108tc-fxMatch-

cisco nexus_93120txMatch-

cisco nexus_93128txMatch-

cisco nexus_93180lc-exMatch-

cisco nexus_93180yc-exMatch-

cisco nexus_93180yc-fxMatch-

cisco nexus_93216tc-fx2Match-

cisco nexus_93240yc-fx2Match-

cisco nexus_9332cMatch-

cisco nexus_9332pqMatch-

cisco nexus_93360yc-fx2Match-

cisco nexus_9336c-fx2Match-

cisco nexus_9336pq_aci_spineMatch-

cisco nexus_9348gc-fxpMatch-

cisco nexus_9364cMatch-

cisco nexus_9372pxMatch-

cisco nexus_9372px-eMatch-

cisco nexus_9372txMatch-

cisco nexus_9372tx-eMatch-

cisco nexus_9396pxMatch-

cisco nexus_9396txMatch-

Node

cisco nx-osRange7.0(3)f–9.2(3)

AND

cisco nexus_36180yc-rMatch-

cisco nexus_3636c-rMatch-

cisco nexus_9500Match-

cisco nexus_9504Match-

cisco nexus_9508Match-

cisco nexus_9516Match-

Node

cisco nx-osRange7.0–7.3(5)n1(1)

AND

cisco nexus_5548pMatch-

cisco nexus_5548upMatch-

cisco nexus_5596tMatch-

cisco nexus_5596upMatch-

cisco nexus_56128pMatch-

cisco nexus_5624qMatch-

cisco nexus_5648qMatch-

cisco nexus_5672upMatch-

cisco nexus_5696qMatch-

cisco nexus_6001Match-

cisco nexus_6004Match-

cisco nexus_6004xMatch-

Node

cisco nx-osRange6.2–8.0(1)

AND

cisco nexus_7000Match-

cisco nexus_7000_10-slotMatch-

cisco nexus_7000_18-slotMatch-

cisco nexus_7000_4-slotMatch-

cisco nexus_7000_9-slotMatch-

cisco nexus_7700Match-

cisco nexus_7700_10-slotMatch-

cisco nexus_7700_18-slotMatch-

cisco nexus_7700_2-slotMatch-

cisco nexus_7700_6-slotMatch-

[
  {
    "product": "Cisco NX-OS Software 5.0(3)A1(1)",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "n/a",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-nxos-vman-cmd-inj

21 Nov 2024 04:23Current

7.2High risk

Vulners AI Score7.2

CVSS 27.2

CVSS 3.17.8

CVSS 36.7

EPSS0.00133

SSVC

CWE-78