CVE-2019-1605: Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability
First published: Fri Mar 08 2019(Updated: )
A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTTPS request to an internal service on an affected device that has the NX-API feature enabled. A successful exploit could allow the attacker to cause a buffer overflow and execute arbitrary code as root. Note: The NX-API feature is disabled by default. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.1(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(8). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(2)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 7.3(3)D1(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Nx-os | >=7.3<8.1\(1\) | |
| Cisco MDS 9000 | ||
| Cisco Nx-os | <6.0\(2\)a8\(8\) | |
| Cisco Nexus 3500 | ||
| Cisco Nx-os | >=7.0\(3\)i5<7.0\(3\)i7\(1\) | |
| Cisco Nexus 3000 | ||
| Cisco Nx-os | >=7.0\(3\)f3<7.0\(3\)f3\(5\) | |
| Cisco Nexus 3600 | ||
| Cisco Nx-os | >=7.2<7.3\(3\)d1\(1\) | |
| Cisco Nexus 7000 | ||
| Cisco Nexus 7700 | ||
| Cisco Nx-os | <7.0\(3\)i4\(8\) | |
| Cisco Nexus 9000 | ||
| Cisco Nx-os | >=7.0\(3\)f1<7.0\(3\)f3\(5\) | |
| Cisco Nexus 9500 | ||
| Cisco Nx-os | >=7.3<7.3\(2\)n1\(1\) | |
| Cisco Nexus 2000 | ||
| Cisco Nexus 5500 | ||
| Cisco Nexus 5600 | ||
| Cisco Nexus 6000 | ||
| All of | ||
| Cisco Nx-os | >=7.3<8.1\(1\) | |
| Cisco MDS 9000 | ||
| All of | ||
| Cisco Nx-os | <6.0\(2\)a8\(8\) | |
| Cisco Nexus 3500 | ||
| All of | ||
| Cisco Nx-os | >=7.0\(3\)i5<7.0\(3\)i7\(1\) | |
| Cisco Nexus 3000 | ||
| All of | ||
| Cisco Nx-os | >=7.0\(3\)f3<7.0\(3\)f3\(5\) | |
| Cisco Nexus 3600 | ||
| All of | ||
| Cisco Nx-os | >=7.2<7.3\(3\)d1\(1\) | |
| Any of | ||
| Cisco Nexus 7000 | ||
| Cisco Nexus 7700 | ||
| All of | ||
| Any of | ||
| Cisco Nx-os | <7.0\(3\)i4\(8\) | |
| Cisco Nx-os | >=7.0\(3\)i5<7.0\(3\)i7\(1\) | |
| Cisco Nexus 9000 | ||
| All of | ||
| Cisco Nx-os | >=7.0\(3\)f1<7.0\(3\)f3\(5\) | |
| Cisco Nexus 9500 | ||
| All of | ||
| Cisco Nx-os | <7.0\(3\)i4\(8\) | |
| Cisco Nexus 3000 | ||
| All of | ||
| Cisco Nx-os | <7.0\(3\)i4\(8\) | |
| Cisco Nexus 9000 | ||
| All of | ||
| Cisco Nx-os | >=7.3<7.3\(2\)n1\(1\) | |
| Any of | ||
| Cisco Nexus 2000 | ||
| Cisco Nexus 5500 | ||
| Cisco Nexus 5600 | ||
| Cisco Nexus 6000 |
Remedy
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-api-ex
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-1605?
CVE-2019-1605 is a vulnerability in the NX-API feature of Cisco NX-OS Software that could allow an authenticated local attacker to execute arbitrary code as root.
How severe is CVE-2019-1605?
CVE-2019-1605 has a severity score of 7.8, which is considered high.
Which software is affected by CVE-2019-1605?
Cisco NX-OS Software versions 7.3 to 8.1(1) are affected by CVE-2019-1605.
How can an attacker exploit CVE-2019-1605?
An attacker can exploit CVE-2019-1605 by sending a crafted HTTP or HTTPS request to the vulnerable NX-API feature.
Are Cisco MDS 9000, Cisco Nexus 3500, and other devices affected by CVE-2019-1605?
No, Cisco MDS 9000, Cisco Nexus 3500, and other mentioned devices are not vulnerable to CVE-2019-1605.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/type
- agent/severity
- agent/remedy
- agent/title
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/last-modified-date
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco nx-os
- version/cisco nx-os/7.3
- canonical/cisco mds 9000
- canonical/cisco nexus 3500
- version/cisco nx-os/7.0\(3\)i5
- canonical/cisco nexus 3000
- version/cisco nx-os/7.0\(3\)f3
- canonical/cisco nexus 3600
- version/cisco nx-os/7.2
- canonical/cisco nexus 7000
- canonical/cisco nexus 7700
- canonical/cisco nexus 9000
- version/cisco nx-os/7.0\(3\)f1
- canonical/cisco nexus 9500
- canonical/cisco nexus 2000
- canonical/cisco nexus 5500
- canonical/cisco nexus 5600
- canonical/cisco nexus 6000