CVE-2019-1808 — Improper Verification of Cryptographic Signature in Cisco Nx-os Software

CWE-347 — Improper Verification of Cryptographic Signature5 documents5 sources
Severity
4.4MEDIUMNVD
EPSS
0.1%
top 75.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Cisco Nx-os SoftwareCisco Nx-os
Timeline
PublishedMay 15
Latest updateApr 3

Description

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An attacker could exploit this vulnerability by loading an unsigned software patch on an affected device. A successful exploit could allow the attacker to boot a malicious software pa…

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5cisco/cisco_nx-os_softwareunspecified — 8.3(1)
▶NVDcisco/nx-os7.3 — 8.1\(1a\)+3

🔴Vulnerability Details

2
GHSA
GHSA-93w9-pxq6-2vjj: A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-le↗2022-05-24
▶
CVEList
Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability↗2019-05-15
▶

💥Exploits & PoCs

1
Exploit-DB
Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure↗2025-04-03
▶

📋Vendor Advisories

1
Cisco
Cisco MDS 9700 Series Multilayer Directors and Nexus 7000/7700 Series Switches Software Patch Signature Verification Vulnerability↗2019-05-15
▶
CVE-2019-1808 — Cisco Nx-os Software vulnerability | cvebase