CVE-2019-1614

🗓️ 11 Mar 2019 22:00:00Reported by ciscoType

A vulnerability in Cisco NX-OS Software allows authenticated remote attackers to execute arbitrary commands with root privileges via NX-API feature. Affected systems include MDS 9000, Nexus 3000, 3500, 2000, 5500, 5600, 6000, 9000, 7000, and 7700 Series Switches

Reporter	Title	Published	Views	Family All 9
Cisco	Cisco NX-OS Software NX-API Command Injection Vulnerability	6 Mar 201916:00	–	cisco
Tenable Nessus	Cisco NX-OS Software NX-API Command Injection Vulnerability	11 Mar 201900:00	–	nessus
Tenable Nessus	Cisco NX-OS Software NX-API Command Injection (CVE-2019-1614)	25 Jul 202300:00	–	nessus
Cvelist	CVE-2019-1614 Cisco NX-OS Software NX-API Command Injection Vulnerability	11 Mar 201922:00	–	cvelist
EUVD	EUVD-2019-10171	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1614	11 Mar 201921:29	–	nvd
OSV	CVE-2019-1614	11 Mar 201921:29	–	osv
Prion	Command injection	11 Mar 201921:29	–	prion
Vulnrichment	CVE-2019-1614 Cisco NX-OS Software NX-API Command Injection Vulnerability	11 Mar 201922:00	–	vulnrichment

NVD

Vulners

Node

cisco nx-osRange8.2–8.3(2)

AND

cisco mds_9000Match-

Node

cisco nx-osRange7.3–8.1(1b)

AND

cisco mds_9000Match-

Node

cisco nx-osRange7.0(3)i5–7.0(3)i7(4)

AND

cisco nexus_3000Match-

Node

cisco nx-osRange<7.0(3)i4(9)

AND

cisco nexus_3000Match-

Node

cisco nx-osRange7.0(3)–7.0(3)i7(4)

AND

cisco nexus_3500Match-

Node

cisco nx-osRange7.3–7.3(4)n1(1)

AND

cisco nexus_2000Match-

cisco nexus_5500Match-

cisco nexus_5600Match-

cisco nexus_6000Match-

Node

cisco nx-osRange8.3–8.3(2)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osRange8.0–8.2(3)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osRange7.2–7.3(3)d1(1)

AND

cisco nexus_7000Match-

cisco nexus_7700Match-

Node

cisco nx-osRange<7.3(3)i4(9)

AND

cisco nexus_9000Match-

[
  {
    "product": "MDS 9000 Series Multilayer Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "8.1(1b)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "8.2(3)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 3000 Series Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I4(9)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 3500 Platform Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 2000, 5500, 5600, and 6000 Series Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.3(4)N1(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 9000 Series Switches in Standalone NX-OS Mode",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.0(3)I4(9)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "7.0(3)I7(4)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Nexus 7000 and 7700 Series Switches",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "7.3(3)D1(1)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "8.2(3)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-NXAPI-cmdinj
securityfocus	www.securityfocus.com/bid/107339

21 Nov 2024 04:36Current

9High risk

Vulners AI Score9

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.01046

SSVC