CVE-2019-1612

CWE-77 — Command Injection CWE-78 — OS Command Injection5 documents5 sources

Severity

6.7MEDIUM

EPSS

0.1%

top 75.31%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Cisco Nexus 3000 Series Switches Cisco Nexus 3500 Platform Switches Cisco Nexus 3600 Platform Switches +3 more

Timeline

PublishedMar 11

Latest updateMay 13

Description

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating s…

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:LExploitability: 0.8 | Impact: 3.4

Affected Packages6 packages

▶CVEListV5cisco/nexus_9000_series_switches_in_standalone_nx-os_modeunspecified — 7.0(3)I4(9)+1

▶CVEListV5cisco/nexus_3000_series_switchesunspecified — 7.0(3)I4(9)+1

▶CVEListV5cisco/nexus_3500_platform_switchesunspecified — 7.0(3)I7(4)

▶CVEListV5cisco/nexus_3600_platform_switchesunspecified — 7.0(3)F3(5)

▶CVEListV5cisco/nexus_9500_r-series_line_cards_and_fabric_modulesunspecified — 7.0(3)F3(5)

🔴Vulnerability Details

GHSA

GHSA-rcvx-84w9-r9x5: A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operat↗2022-05-13

▶

CVEList

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612)↗2019-03-11

▶

📋Vendor Advisories

Cisco

Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1612)↗2019-03-06

▶

💬Community

Bugzilla

CVE-2019-13306 ImageMagick: stack-based buffer overflow at coders/pnm.c in WritePNMImage because of off-by-one errors↗2019-07-16

▶