CVE-2019-1592

A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker to gain elevated privileges as root on an affected device. The vulnerability is due to insufficient...

CVE-2019-1590: Improper Certificate Validation

A vulnerability in the Transport Layer Security TLS certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client authentication on an affected device. The...

CVE-2019-1592: Improper Input Validation

A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker to gain elevated privileges as root on an affected device. The vulnerability is due to insufficient...

CVE-2019-1804: Initialization of a Resource with an Insecure Default

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of...

CVE-2019-1803: Incorrect Permission Assignment for Critical Resource

A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device. The vulnerability is...

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability

A vulnerability in the Transport Layer Security TLS certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client authentication on an affected device. The...

PT-2019-2058

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Application Centric Infrastructure ACI Mode Switch Software affected versions not specified Description The issue is related to insufficient validation of user-supplied files, allowing an authenticated, local attacker t...

PT-2019-2046

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Switch Software affected versions not specified Description The issue is related to insufficient access control in the filesystem management mechanisms of the Cisco Nexus 9000 Series switches. This could allow an...

Input validation

A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escape a restricted shell on an affected device. The vulnerability is due to insufficient sanitization of user-supplied input when issuing a...

CVE-2019-1591

CVE-2019-1591 affects Cisco Nexus 9000 Series switches in ACI Mode. Affected due to insufficient sanitization of user input in a specific CLI command, allowing an authenticated, local attacker to escape the restricted shell and execute arbitrary commands with root-level privileges. Affected devic...

CVE-2019-1585

Cisco Nexus 9000 Series ACI Mode Switch Software contains a privilege-escalation vulnerability (CVE-2019-1585) due to misconfigured sudoers for the bashroot component. An authenticated, local attacker could log in with a crafted user ID and temporarily gain root privileges, escalating Standard us...

CVE-2019-1585: Undefined Security Weakness

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

CVE-2019-1591: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escape a restricted shell on an affected device. The vulnerability is due to insufficient sanitization of user-supplied input when issuing a...

Switch v4.68 - Code Execution Vulnerability

Document Title: =============== Switch v4.68 - Code Execution Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1649 Release Date: ============= 2015-11-23 Vulnerability Laboratory ID VL-ID: ==================================== 1649 Common...