Cisco Warns of Critical Nexus 9000 Data Center Flaw

🗓️ 02 May 2019 15:24:10Reported by Tara SealsType

threatpost🔗 threatpost.com👁 78 Views

Cisco warns of critical Nexus 9000 data center flaw, allowing remote attackers to take over the switch with root user privileges

Reporter	Title	Published	Views	Family All 44
ATTACKERKB	Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability	3 May 201900:00	–	attackerkb
BDU FSTEC	The vulnerability of the network operating system NX-OS for Cisco Nexus 9000 series routers, related to errors in SSH credentials, allows a hacker to elevate their privileges to the root level.	16 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Secure Shell (SSH) protocol implementation in Cisco Small Business network devices allows a hacker to gain access to the configuration settings under the authority of the administrator.	16 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the call processing function in Cisco IP Phone models 7800 and 8800 allows a intruder to cause a service failure.	16 May 201900:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software lies in the insufficient verification of the authenticity of executed requests. This allows a hacker to execute arbitrary code in the context of the current user.	16 May 201900:00	–	bdu_fstec
Circl	CVE-2019-1804	2 May 201916:49	–	circl
Cisco	Cisco Adaptive Security Appliance Software Cross-Site Request Forgery Vulnerability	1 May 201916:00	–	cisco
Cisco	Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Default SSH Key Vulnerability	1 May 201916:00	–	cisco
Cisco	Cisco IP Phone 7800 Series and 8800 Series Session Initiation Protocol XML Denial of Service Vulnerability	1 May 201916:00	–	cisco
Cisco	Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability	1 May 201916:00	–	cisco

Source	Link
cisco	www.cisco.com/c/en/us/products/switches/nexus-9000-series-switches/index.html
threatpost	www.threatpost.com/newsletter-sign/
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-sshkey
tools	www.tools.cisco.com/security/center/publicationListing.x
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-scbv
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-phone-sip-xml-dos
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-asa-csrf

02 May 2019 15:24Current

0.9Low risk

Vulners AI Score0.9

EPSS0.0348

cisco nexus 9000 data center vulnerability sdn remote attacker privilege escalation ssh high severity ipv6 cve-2019-1804 aci multi cloud default key pair ernw enno rey netzwerke denial of service voip phones sip xml payload