CVE-2019-1601

🗓️ 08 Mar 2019 18:00:00Reported by ciscoType

CVE-2019-1601: Filesystem permissions vulnerability in Cisco NX-OS Softwar

Reporter	Title	Published	Views	Family All 8
Cisco	Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability	6 Mar 201916:00	–	cisco
Tenable Nessus	Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability	30 Jul 201900:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Unauthorized Filesystem Access (CVE-2019-1601)	25 Jul 202300:00	–	nessus
Cvelist	CVE-2019-1601 Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability	8 Mar 201918:00	–	cvelist
EUVD	EUVD-2019-10158	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1601	8 Mar 201918:29	–	nvd
Prion	Authentication flaw	8 Mar 201918:29	–	prion
Vulnrichment	CVE-2019-1601 Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability	8 Mar 201918:00	–	vulnrichment

NVD

Node

cisco nx-osRange8.2–8.3(1)

AND

cisco mds_9000Match-

Node

cisco nx-osRange7.0(3)–7.0(3)i7(4)

AND

cisco nexus_3500Match-

Node

cisco nx-osRange7.0(3)i5–7.0(3)i7(4)

AND

cisco nexus_3000Match-

Node

cisco nx-osRange7.0(3)f3–7.0(3)f3(5)

AND

cisco nexus_3600Match-

Node

cisco nx-osRange7.0(3)i5–7.0(3)i7(4)

AND

cisco nexus_9000Match-

Node

cisco nx-osRange7.0(3)f1–7.0(3)f3(5)

AND

cisco nexus_9500Match-

Node

cisco nx-osRange7.3–8.1(1b)

AND

cisco mds_9000Match-

Node

cisco nx-osRange<6.2(25)

AND

cisco mds_9000Match-

Node

cisco nx-osRange<7.0(3)i4(9)

AND

cisco nexus_3000Match-

Node

cisco nx-osRange8.2–8.3(1)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osRange7.2–7.3(3)d1(1)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osRange<6.2(22)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osRange<7.0(3)i4(9)

AND

cisco nexus_9000Match-

Node

cisco nx-osRange<6.0(2)a8(10)

AND

cisco nexus_3500Match-

Node

cisco nx-osRange7.2–7.3(3)n1(1)

AND

cisco nexus_2000Match-

cisco nexus_5500Match-

cisco nexus_5600Match-

cisco nexus_6000Match-

Node

cisco nx-osRange<7.1(5)n1(1b)

AND

cisco nexus_2000Match-

cisco nexus_5500Match-

cisco nexus_5600Match-

cisco nexus_6000Match-

Node

cisco nx-osRange8.0–8.1(2)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

[
  {
    "product": "MDS 9000 Series Multilayer Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.2(25)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "8.1(1b)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "8.3(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 3000 Series Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I4(9)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 3500 Platform Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.0(2)A8(10)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 3600 Platform Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)F3(5)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 2000, 5500, 5600, and 6000 Series Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.1(5)N1(1b)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "7.3(3)N1(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 7000 and 7700 Series Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "6.2(22)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "7.3(3)D1(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "8.2(3)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 9000 Series Switches-Standalone",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I4(9)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 9500 R-Series Line Cards and Fabric Modules",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)F3(5)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-file-access
securityfocus	www.securityfocus.com/bid/107404

21 Nov 2024 04:36Current

7.7High risk

Vulners AI Score7.7

CVSS 27.2

CVSS 3.17.8

CVSS 37.8

EPSS0.00066

SSVC