CVE-2019-1603

CWE-285CWE-863 — Incorrect Authorization6 documents5 sources
Severity
7.8HIGH
EPSS
0.2%
top 55.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Cisco Nexus 3000 Series SwitchesCisco Nexus 3500 Platform SwitchesCisco Nexus 3600 Platform Switches+3 more
Timeline
PublishedMar 8
Latest updateMay 13

Description

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow an attacker to make configuration changes to the system as administrator. Nexus 3000 Series…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5cisco/nexus_9000_series_switches-standaloneunspecified — 7.0(3)I7(4)
▶CVEListV5cisco/nexus_3000_series_switchesunspecified — 7.0(3)I7(4)
▶CVEListV5cisco/nexus_9500_r-series_line_cards_and_fabric_modulesunspecified — 7.0(3)F3(5)
▶CVEListV5cisco/nexus_3500_platform_switchesunspecified — 7.0(3)I7(4)
▶CVEListV5cisco/nexus_3600_platform_switchesunspecified — 7.0(3)F3(5)

Patches

Patch: tools.cisco.com ↗Patch: tools.cisco.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rf22-g3mc-fghj: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrato↗2022-05-13
▶
CVEList
Cisco NX-OS Software Privilege Escalation Vulnerability↗2019-03-08
▶

📋Vendor Advisories

1
Cisco
Cisco NX-OS Software Privilege Escalation Vulnerability↗2019-03-06
▶

💬Community

2
Bugzilla
CVE-2019-16569 jenkins-mantis-plugin: attackers can connect to an attacker-specified web server leads to XSS↗2020-04-01
▶
Bugzilla
CVE-2019-13303 ImageMagick: heap-based buffer over-read in MagickCore/composite.c in CompositeImage↗2019-07-16
▶
CVE-2019-1603 (HIGH CVSS 7.8) | A vulnerability in the CLI of Cisco | cvebase.io