CVE-2019-1590 Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability

🗓️ 03 May 2019 14:50:24Reported by ciscoType

A vulnerability in Cisco Nexus 9000 Series Fabric Switches allows unauthenticated remote attacker to gain full control through insecure TLS client authentication

Reporter	Title	Published	Views	Family All 9
BDU FSTEC	The vulnerability of the network operating system NX-OS for Cisco Nexus 9000 routers is related to errors in verifying the Transport Layer Security (TLS) credentials. This allows a hacker to gain full control over all components within the ACI structure of the vulnerable device.	16 May 201900:00	–	bdu_fstec
Cisco	Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability	1 May 201916:00	–	cisco
Tenable Nessus	Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability (cisco-sa-20190501-aci-insecure-fabric)	3 Jun 202000:00	–	nessus
Tenable Nessus	Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication (CVE-2019-1590)	25 Jul 202300:00	–	nessus
CVE	CVE-2019-1590	3 May 201914:50	–	cve
EUVD	EUVD-2019-10147	7 Oct 202500:30	–	euvd
NVD	CVE-2019-1590	3 May 201915:29	–	nvd
Prion	Authentication flaw	3 May 201915:29	–	prion
Vulnrichment	CVE-2019-1590 Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability	3 May 201914:50	–	vulnrichment

[
  {
    "product": "Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "14.1(1i)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabric

03 May 2019 14:50Current

8.5High risk

Vulners AI Score8.5

CVSS 38.1

EPSS0.0098

CWE-295