CVE-2019-1731 Cisco NX-OS Software SSH Key Information Disclosure Vulnerability

A vulnerability in the SSH CLI key management functionality of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user's private SSH key to all authenticated users on the targeted device. The attacker must authenticate with valid administrator device credentials. The...

CVE-2019-1731

Summary of CVE-2019-1731 (Cisco NX-OS SSH Key Information Disclosure) : A vulnerability in the SSH CLI key management of Cisco NX-OS Software could allow an authenticated, local attacker to expose a user’s private SSH key to all authenticated users on the targeted device. The issue stems from inc...

CVE-2019-1732 Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability

A vulnerability in the Remote Package Manager RPM subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use TOCTOU race condition to corrupt local variables, which could lead to arbitrary command injectio...

CVE-2019-1732 Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability

A vulnerability in the Remote Package Manager RPM subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use TOCTOU race condition to corrupt local variables, which could lead to arbitrary command injectio...

CVE-2019-1732

Cisco NX-OS Software Remote Package Manager (RPM) is affected by a TOCTOU race in the RPM subsystem that can allow an authenticated local attacker with administrator credentials to corrupt variables and perform arbitrary command injection. The root cause is a lack of proper locking on critical va...

CVE-2019-1733

CVE-2019-1733 affects Cisco NX-OS NX-API Sandbox; vulnerability due to insufficient input validation allows an authenticated remote attacker to trigger cross-site scripting via a crafted link, executing script in the user’s NX-API Sandbox session. Exploitation requires user interaction. Cisco rel...

CVE-2019-1733 Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability

A vulnerability in the NX API NX-API Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of...

CVE-2019-1733 Cisco NX-OS Software NX-API Sandbox Cross-Site Scripting Vulnerability

A vulnerability in the NX API NX-API Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of...

CVE-2019-1727 Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1727

CVE-2019-1727 affects Cisco NX-OS Software: the Python scripting subsystem allows a locally authenticated attacker (admin or Python privileges) to escape the scripting sandbox via insufficient sanitization of user parameters, enabling arbitrary command execution and privilege escalation. Exploita...

CVE-2019-1727 Cisco NX-OS Software Python Parser Privilege Escalation Vulnerability

A vulnerability in the Python scripting subsystem of Cisco NX-OS Software could allow an authenticated, local attacker to escape the Python parser and issue arbitrary commands to elevate the attacker's privilege level. The vulnerability is due to insufficient sanitization of user-supplied...

CVE-2019-1728

Cisco FXOS and NX-OS Software are affected by CVE-2019-1728 through the Secure Configuration Validation functionality. An authenticated local attacker with administrative credentials can overwrite the persistent configuration on the device, allowing arbitrary commands to run at system boot with r...

CVE-2019-1728 Cisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability

A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the privileges of root. The vulnerability is due to a lack of proper validation of...

CVE-2019-1728 Cisco FXOS and NX-OS Software Secure Configuration Bypass Vulnerability

A vulnerability in the Secure Configuration Validation functionality of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to run arbitrary commands at system boot time with the privileges of root. The vulnerability is due to a lack of proper validation of...

CVE-2019-1729 Cisco NX-OS Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system files. These file overwrites by the attacker are accomplished at the root...

CVE-2019-1729 Cisco NX-OS Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI implementation of a specific command used for image maintenance for Cisco NX-OS Software could allow an authenticated, local attacker to overwrite any file on the file system including system files. These file overwrites by the attacker are accomplished at the root...

CVE-2019-1729

CVE-2019-1729 affects Cisco NX-OS Software. A vulnerability in the CLI built for image maintenance allows an authenticated, local attacker to overwrite any file on the file system (including system files) due to lack of verification of user-input parameters and image-signature checks. Exploitatio...

CVE-2019-1726 Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...

CVE-2019-1726 Cisco NX-OS Software CLI Bypass to Internal Service Vulnerability

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to access internal services that should be restricted on an affected device, such as the NX-API. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An...

CVE-2019-1726

Cisco NX-OS Software CLI bypass (CVE-2019-1726) is verified in multiple sources as a vulnerability where an authenticated, local attacker could bypass restrictions by supplying crafted arguments to a CLI command, potentially gaining access to internal services such as NX-API. Root cause is insuff...