Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass (CVE-2019-12662)

🗓️ 25 Jul 2023 00:00:00Reported by TenableType 
nessus
 nessus🔗 www.tenable.com👁 27 Views

Cisco NX-OS & IOS XE SW Virtual Service Image Signature Bypass vulnerabilit

Related
Refs
Code
ReporterTitlePublishedViews
Family
BDU FSTEC		The vulnerability of NX-OS and Cisco IOS XE operating systems arises from errors during the verification of the electronic signature when installing an Open Virtual Appliance (OVA) image. This vulnerability allows a perpetrator to install malware onto a vulnerable device.
3 Oct 201900:00
–bdu_fstec
Tenable Nessus		Cisco NX-OS Software Virtual Service Image Signature Bypass Vulnerability
4 Oct 201900:00
–nessus
Cisco		Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability
25 Sep 201916:00
–cisco
CNVD		Cisco NX-OS and Cisco IOS XE Data Forgery Issue Vulnerabilities
26 Sep 201900:00
–cnvd
CVE		CVE-2019-12662
25 Sep 201920:16
–cve
Cvelist		CVE-2019-12662 Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability
25 Sep 201920:16
–cvelist
EUVD		EUVD-2019-4253
7 Oct 202500:30
–euvd
NVD		CVE-2019-12662
25 Sep 201921:15
–nvd
OSV		CVE-2019-12662
25 Sep 201921:15
–osv
Prion		Design/Logic Flaw
25 Sep 201921:15
–prion
Rows per page
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(501316);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/10/16");

  script_cve_id("CVE-2019-12662");

  script_name(english:"Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass (CVE-2019-12662)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software
could allow an authenticated, local attacker with valid administrator
or privilege level 15 credentials to load a virtual service image and
bypass signature verification on an affected device. The vulnerability
is due to improper signature verification during the installation of
an Open Virtual Appliance (OVA) image. An authenticated, local
attacker could exploit this vulnerability and load a malicious,
unsigned OVA image on an affected device. A successful exploit could
allow an attacker to perform code execution on a crafted software OVA
image.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-vman
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?fbfca026");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2019-12662");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_cwe_id(347);

  script_set_attribute(attribute:"vuln_publication_date", value:"2019/09/25");
  script_set_attribute(attribute:"patch_publication_date", value:"2019/09/25");
  script_set_attribute(attribute:"plugin_publication_date", value:"2023/07/25");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nexus_3000_series_switches");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nexus_5000_series_switches");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nexus_6000_series_switches");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nexus_7000_series_switches");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nexus_9000_series_switches");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2023-2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Cisco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Cisco');

var asset = tenable_ot::assets::get(vendor:'Cisco');

var vuln_cpes = {
    "cpe:/o:cisco:nexus_5000_series_switches:7.3%280%29N1%281%29" :
        {"versionEndIncluding" : "7.3%280%29N1%281%29", "versionStartIncluding" : "7.3%280%29N1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_6000_series_switches:7.3%280%29N1%281%29" :
        {"versionEndIncluding" : "7.3%280%29N1%281%29", "versionStartIncluding" : "7.3%280%29N1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%281%29" :
        {"versionEndIncluding" : "7.0%283%29I4%281%29", "versionStartIncluding" : "7.0%283%29I4%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%281%29" :
        {"versionEndIncluding" : "7.0%283%29I4%281%29", "versionStartIncluding" : "7.0%283%29I4%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%282%29" :
        {"versionEndIncluding" : "7.0%283%29I4%282%29", "versionStartIncluding" : "7.0%283%29I4%282%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%282%29" :
        {"versionEndIncluding" : "7.0%283%29I4%282%29", "versionStartIncluding" : "7.0%283%29I4%282%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%283%29" :
        {"versionEndIncluding" : "7.0%283%29I4%283%29", "versionStartIncluding" : "7.0%283%29I4%283%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%283%29" :
        {"versionEndIncluding" : "7.0%283%29I4%283%29", "versionStartIncluding" : "7.0%283%29I4%283%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_5000_series_switches:7.3%281%29N1%281%29" :
        {"versionEndIncluding" : "7.3%281%29N1%281%29", "versionStartIncluding" : "7.3%281%29N1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_6000_series_switches:7.3%281%29N1%281%29" :
        {"versionEndIncluding" : "7.3%281%29N1%281%29", "versionStartIncluding" : "7.3%281%29N1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_7000_series_switches:8.1%281%29" :
        {"versionEndIncluding" : "8.1%281%29", "versionStartIncluding" : "8.1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_7000_series_switches:7.3%281%29D1%281%29" :
        {"versionEndIncluding" : "7.3%281%29D1%281%29", "versionStartIncluding" : "7.3%281%29D1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_7000_series_switches:7.3%280%29DX%281%29" :
        {"versionEndIncluding" : "7.3%280%29DX%281%29", "versionStartIncluding" : "7.3%280%29DX%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_7000_series_switches:7.3%280%29D1%281%29" :
        {"versionEndIncluding" : "7.3%280%29D1%281%29", "versionStartIncluding" : "7.3%280%29D1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_5000_series_switches:7.3%282%29N1%281%29" :
        {"versionEndIncluding" : "7.3%282%29N1%281%29", "versionStartIncluding" : "7.3%282%29N1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_6000_series_switches:7.3%282%29N1%281%29" :
        {"versionEndIncluding" : "7.3%282%29N1%281%29", "versionStartIncluding" : "7.3%282%29N1%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_5000_series_switches:7.3%280%29N1%281b%29" :
        {"versionEndIncluding" : "7.3%280%29N1%281b%29", "versionStartIncluding" : "7.3%280%29N1%281b%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_6000_series_switches:7.3%280%29N1%281b%29" :
        {"versionEndIncluding" : "7.3%280%29N1%281b%29", "versionStartIncluding" : "7.3%280%29N1%281b%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_5000_series_switches:7.3%280%29N1%281a%29" :
        {"versionEndIncluding" : "7.3%280%29N1%281a%29", "versionStartIncluding" : "7.3%280%29N1%281a%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_6000_series_switches:7.3%280%29N1%281a%29" :
        {"versionEndIncluding" : "7.3%280%29N1%281a%29", "versionStartIncluding" : "7.3%280%29N1%281a%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%284%29" :
        {"versionEndIncluding" : "7.0%283%29I4%284%29", "versionStartIncluding" : "7.0%283%29I4%284%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%284%29" :
        {"versionEndIncluding" : "7.0%283%29I4%284%29", "versionStartIncluding" : "7.0%283%29I4%284%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%285%29" :
        {"versionEndIncluding" : "7.0%283%29I4%285%29", "versionStartIncluding" : "7.0%283%29I4%285%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%285%29" :
        {"versionEndIncluding" : "7.0%283%29I4%285%29", "versionStartIncluding" : "7.0%283%29I4%285%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%286%29" :
        {"versionEndIncluding" : "7.0%283%29I4%286%29", "versionStartIncluding" : "7.0%283%29I4%286%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%286%29" :
        {"versionEndIncluding" : "7.0%283%29I4%286%29", "versionStartIncluding" : "7.0%283%29I4%286%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%287%29" :
        {"versionEndIncluding" : "7.0%283%29I4%287%29", "versionStartIncluding" : "7.0%283%29I4%287%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%287%29" :
        {"versionEndIncluding" : "7.0%283%29I4%287%29", "versionStartIncluding" : "7.0%283%29I4%287%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I5%281%29" :
        {"versionEndIncluding" : "7.0%283%29I5%281%29", "versionStartIncluding" : "7.0%283%29I5%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I5%281%29" :
        {"versionEndIncluding" : "7.0%283%29I5%281%29", "versionStartIncluding" : "7.0%283%29I5%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I5%282%29" :
        {"versionEndIncluding" : "7.0%283%29I5%282%29", "versionStartIncluding" : "7.0%283%29I5%282%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I5%282%29" :
        {"versionEndIncluding" : "7.0%283%29I5%282%29", "versionStartIncluding" : "7.0%283%29I5%282%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I6%281%29" :
        {"versionEndIncluding" : "7.0%283%29I6%281%29", "versionStartIncluding" : "7.0%283%29I6%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I6%281%29" :
        {"versionEndIncluding" : "7.0%283%29I6%281%29", "versionStartIncluding" : "7.0%283%29I6%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:6.0%282%29A8%281%29" :
        {"versionEndIncluding" : "6.0%282%29A8%281%29", "versionStartIncluding" : "6.0%282%29A8%281%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:6.0%282%29A8%282%29" :
        {"versionEndIncluding" : "6.0%282%29A8%282%29", "versionStartIncluding" : "6.0%282%29A8%282%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:6.0%282%29A8%283%29" :
        {"versionEndIncluding" : "6.0%282%29A8%283%29", "versionStartIncluding" : "6.0%282%29A8%283%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:6.0%282%29A8%284%29" :
        {"versionEndIncluding" : "6.0%282%29A8%284%29", "versionStartIncluding" : "6.0%282%29A8%284%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:6.0%282%29A8%284a%29" :
        {"versionEndIncluding" : "6.0%282%29A8%284a%29", "versionStartIncluding" : "6.0%282%29A8%284a%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:6.0%282%29A8%285%29" :
        {"versionEndIncluding" : "6.0%282%29A8%285%29", "versionStartIncluding" : "6.0%282%29A8%285%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:6.0%282%29A8%286%29" :
        {"versionEndIncluding" : "6.0%282%29A8%286%29", "versionStartIncluding" : "6.0%282%29A8%286%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%281t%29" :
        {"versionEndIncluding" : "7.0%283%29I4%281t%29", "versionStartIncluding" : "7.0%283%29I4%281t%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%281t%29" :
        {"versionEndIncluding" : "7.0%283%29I4%281t%29", "versionStartIncluding" : "7.0%283%29I4%281t%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I4%286t%29" :
        {"versionEndIncluding" : "7.0%283%29I4%286t%29", "versionStartIncluding" : "7.0%283%29I4%286t%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I4%286t%29" :
        {"versionEndIncluding" : "7.0%283%29I4%286t%29", "versionStartIncluding" : "7.0%283%29I4%286t%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I5%283%29" :
        {"versionEndIncluding" : "7.0%283%29I5%283%29", "versionStartIncluding" : "7.0%283%29I5%283%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I5%283%29" :
        {"versionEndIncluding" : "7.0%283%29I5%283%29", "versionStartIncluding" : "7.0%283%29I5%283%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I5%283a%29" :
        {"versionEndIncluding" : "7.0%283%29I5%283a%29", "versionStartIncluding" : "7.0%283%29I5%283a%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I5%283a%29" :
        {"versionEndIncluding" : "7.0%283%29I5%283a%29", "versionStartIncluding" : "7.0%283%29I5%283a%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29I5%283b%29" :
        {"versionEndIncluding" : "7.0%283%29I5%283b%29", "versionStartIncluding" : "7.0%283%29I5%283b%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29I5%283b%29" :
        {"versionEndIncluding" : "7.0%283%29I5%283b%29", "versionStartIncluding" : "7.0%283%29I5%283b%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:7.0%283%29IC4%284%29" :
        {"versionEndIncluding" : "7.0%283%29IC4%284%29", "versionStartIncluding" : "7.0%283%29IC4%284%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_9000_series_switches:7.0%283%29IC4%284%29" :
        {"versionEndIncluding" : "7.0%283%29IC4%284%29", "versionStartIncluding" : "7.0%283%29IC4%284%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_5000_series_switches:7.3%282%29N1%281b%29" :
        {"versionEndIncluding" : "7.3%282%29N1%281b%29", "versionStartIncluding" : "7.3%282%29N1%281b%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_6000_series_switches:7.3%282%29N1%281b%29" :
        {"versionEndIncluding" : "7.3%282%29N1%281b%29", "versionStartIncluding" : "7.3%282%29N1%281b%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_5000_series_switches:7.3%282%29N1%281c%29" :
        {"versionEndIncluding" : "7.3%282%29N1%281c%29", "versionStartIncluding" : "7.3%282%29N1%281c%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_6000_series_switches:7.3%282%29N1%281c%29" :
        {"versionEndIncluding" : "7.3%282%29N1%281c%29", "versionStartIncluding" : "7.3%282%29N1%281c%29", "family" : "NXOS"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_HOLE);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Oct 2025 00:00Current
7.1High risk
Vulners AI Score7.1
CVSS 3.16.7
CVSS 27.2
CVSS 36.7
EPSS0.00304
SSVC
cisconx-osios xesoftwarevirtual serviceimagesignaturebypasscve-2019-12662vulnerabilityauthenticatedlocal attackeradministratorprivilege levelverificationopen virtual applianceovaexploitmaliciouscode executiontenable.otscanner
27