CVE-2019-1768 — Cisco Nx-os Software vulnerability

Vendor	Product	Version range	Fixed in
cisco	cisco_nx-os_software	>= unspecified < 8.3(1)	8.3(1)
cisco	nx-os	< 8.3\(1\)	8.3\(1\)
cisco	nx-os	—	—

Cisco

Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities

vendor_cisco·2019-05-15·CVSS 6.7

CVE-2019-1767 [MEDIUM] CWE-119 Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities Multiple vulnerabilities in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerabilities are due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit these vulnerabilities by including malicious input as the argument of the affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with r

Cisco

Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities

vendor_cisco·CVSS 3.0

CVE-2019-1768 Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities CVE-2019-1768: Cisco NX-OS Software Buffer Overflow and Command Injection Vulnerabilities Multiple vulnerabilities in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerabilities are due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit these vulnerabilities by including malicious input as the argument of the affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating

GHSA

GHSA-3rvc-cvrv-gprh: A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrat

ghsa_unreviewed·2022-05-24

CVE-2019-1768 [HIGH] CWE-119 GHSA-3rvc-cvrv-gprh: A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrat A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit this vulnerability by including malicious input as the argument of the affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. An attacker would need valid administrator credentials to exploit these vul

CVE-2019-1768: A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator…

Affected

CVSS provenance