CVE-2019-1589

CVE-2019-1589 affects Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode, via the TPM functionality. The issue arises from inadequate protection of disk encryption keys used within device hard-drive partitions, enabling an unauthenticated, local attacker with...

CVE-2019-1590

CVE-2019-1590 affects Cisco Nexus 9000 Series Fabric Switches (ACI Mode) where the TLS certificate validation between fabric components is insufficient. The root cause is inadequate TLS client certificate validation, allowing an unauthenticated, remote attacker with a trusted certificate (and cor...

CVE-2019-1592

CVE-2019-1592 affects Cisco Nexus 9000 Series NX-OS in ACI Mode Switch Software. The issue is caused by insufficient validation of user-supplied files, allowing an authenticated, local attacker to create a crafted file in a specific filesystem directory and execute arbitrary OS commands as root. ...

CVE-2019-1587

Cisco Nexus 9000 Series Fabric Switches (ACI mode) expose an information-disclosure vulnerability (CVE-2019-1587) due to improper validation of user-supplied input. An authenticated, remote attacker could issue certain commands with filtered query results to cause returned messages to reveal conf...

CVE-2019-1590: Improper Certificate Validation

A vulnerability in the Transport Layer Security TLS certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client authentication on an affected device. The...

CVE-2019-1804: Initialization of a Resource with an Insecure Default

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of...

CVE-2019-1803: Incorrect Permission Assignment for Critical Resource

A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device. The vulnerability is...

CVE-2019-1692: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability in the web-based management interface of Cisco Application Policy Infrastructure Controller APIC Software could allow an unauthenticated, remote attacker to access sensitive system usage information. The vulnerability is due to a lack of proper data protection mechanisms for certa...

CVE-2019-1592: Improper Input Validation

A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker to gain elevated privileges as root on an affected device. The vulnerability is due to insufficient...

CVE-2019-1587: Improper Input Validation

A vulnerability in Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure ACI mode could allow an authenticated, remote attacker to access sensitive information. The vulnerability occurs because the affected software does not properly validate user-supplied input. An attack...

Cisco Warns of Critical Nexus 9000 Data Center Flaw

A critical vulnerability in Cisco’s software-defined networking SDN software could allow an unauthenticated, remote attacker to connect to a vulnerable data-center switch and take it over, with the privileges of the root user. The bug CVE-2019-1804, which has a CVSS severity rating of 9.8 out of...

Information Disclosure

Red Hat Enterprise Linux is vulnerable to information disclosure attacks. A remote user can exploit this flaw in the default ACI Access Control Instructions. This information could be read by an anonymous user which could lead to leakage of sensitive information...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability

A vulnerability in the Transport Layer Security TLS certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client authentication on an affected device. The...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability

A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device. The vulnerability is...

Input validation

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of digital signature...

CVE-2019-1615

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability is due to improper verification of digital signature...

Cisco Nexus 9000 ACI Mode Elevation of Privilege Vulnerability

The Cisco Nexus 9000 Series switches are modular and fixed-port network switches designed for data centers. An elevation of privilege vulnerability exists in the controller authorization feature of the software for the Cisco Nexus 9000 Series ACI Mode switches. The vulnerability stems from a...

Cisco Nexus 9000 ACI Mode Arbitrary File Read Vulnerability

The Cisco Nexus 9000 Series switches are modular and fixed-port network switches designed for data centers. An arbitrary file read vulnerability exists in the Cisco Nexus 9000 Series ACI mode switches. The vulnerability stems from the lack of a proper input and validation checking mechanism for...

CVE-2019-1594

A vulnerability in the 802.1X implementation for Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to incomplete input validation of Extensible Authentication Protocol over LAN EAPOL...