CVE-2019-1592 — Improper Input Validation in Cisco Nx-os Software FOR Nexus 9000 Series Fabric Switches ACI Mode 11.0.1b

CWE-264CWE-20 — Improper Input Validation5 documents5 sources
Severity
7.8HIGHNVD
EPSS
0.2%
top 53.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Nx-os Software FOR Nexus 9000 Series Fabric Switches ACI Mode 11.0.1bCisco Nx-os
Timeline
PublishedMay 3
Latest updateMay 24

Description

A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker to gain elevated privileges as root on an affected device. The vulnerability is due to insufficient validation of user-supplied files on an affected device. An attacker could exploit this vulnerability by logging in to the CLI of the affected device and creating a crafted file in a specific directory on th…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDcisco/nx-os14.1\(0.90\)

🔴Vulnerability Details

2
GHSA
GHSA-9jvg-6jq4-q9m9: A vulnerability in the background operations functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software co↗2022-05-24
▶
CVEList
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability↗2019-05-03
▶

📋Vendor Advisories

1
Cisco
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Privilege Escalation Vulnerability↗2019-05-01
▶

💬Community

1
Bugzilla
CVE-2019-10072 tomcat: HTTP/2 connection window exhaustion on write, incomplete fix of CVE-2019-0199↗2019-06-25
▶
CVE-2019-1592 — Improper Input Validation in Cisco | cvebase