CVE-2019-1602

🗓️ 08 Mar 2019 19:00:00Reported by ciscoType

A vulnerability in Cisco NX-OS Software allows local attacker to access sensitive data and elevate privileges to admin

Reporter	Title	Published	Views	Family All 8
Cisco	Cisco NX-OS Software Privilege Escalation Vulnerability	6 Mar 201916:00	–	cisco
Tenable Nessus	Cisco NX-OS Software Privilege Escalation Vulnerability	18 Dec 201900:00	–	nessus
Tenable Nessus	Cisco NX-OS Software Privilege Escalation (CVE-2019-1602)	25 Jul 202300:00	–	nessus
Cvelist	CVE-2019-1602 Cisco NX-OS Software Privilege Escalation Vulnerability	8 Mar 201919:00	–	cvelist
EUVD	EUVD-2019-10159	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1602	8 Mar 201919:29	–	nvd
Prion	Input validation	8 Mar 201919:29	–	prion
Vulnrichment	CVE-2019-1602 Cisco NX-OS Software Privilege Escalation Vulnerability	8 Mar 201919:00	–	vulnrichment

NVD

Node

cisco nx-osRange7.0(3)i5–7.0(3)i7(4)

AND

cisco nexus_3000Match-

cisco nexus_9000Match-

Node

cisco nx-osRange7.0(3)f3–7.0(3)f3(5)

AND

cisco nexus_3600Match-

Node

cisco nx-osRange7.0(3)f1–7.0(3)f3(5)

AND

cisco nexus_9500Match-

Node

cisco nx-osRange7.0(3)–7.0(3)f3(5)

AND

cisco nexus_3500Match-

[
  {
    "product": "Nexus 3000 Series Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 3500 Platform Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 3600 Platform Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)F3(5)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 9000 Series Switches-Standalone",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 9500 R-Series Line Cards and Fabric Modules",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)F3(5)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-escalation
securityfocus	www.securityfocus.com/bid/107332

21 Nov 2024 04:36Current

7.3High risk

Vulners AI Score7.3

CVSS 27.2

CVSS 3.17.8

CVSS 37.8

EPSS0.00239

SSVC

CWE-264