What is the vulnerability ID?

The vulnerability ID is CVE-2019-1609.

What is the severity of CVE-2019-1609?

The severity of CVE-2019-1609 is high.

Which software is affected by CVE-2019-1609?

Cisco NX-OS Software versions 7.0(3) to 7.0(3)i7(6) and 8.0 to 8.3 are affected.

How can an attacker exploit CVE-2019-1609?

An authenticated local attacker can exploit CVE-2019-1609 by executing arbitrary commands on the underlying operating system of an affected device.

Are Cisco MDS 9000, Cisco Nexus 3500, Cisco Nexus 3000, Cisco Nexus 3600, Cisco Nexus 7000, Cisco Nexus 7700, Cisco Nexus 9000, Cisco Nexus 9500 affected by CVE-2019-1609?

No, Cisco MDS 9000, Cisco Nexus 3500, Cisco Nexus 3000, Cisco Nexus 3600, Cisco Nexus 7000, Cisco Nexus 7700, Cisco Nexus 9000, and Cisco Nexus 9500 are not affected by CVE-2019-1609.

How do I fix CVE-2019-1609?

Cisco has released software updates to address the vulnerability. Please refer to the Cisco Security Advisory for more information.

Vulnerability/
CVE-2019-1609

high

7.2

CWE

88 77

8/3/2019

21/11/2024

CVE-2019-1609: Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609)

First published: Fri Mar 08 2019(Updated: )

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(27), 8.1(1b), and 8.3(2). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(6). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(6). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3), and 8.3(2). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(9) and7.0(3)I7(6). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).

Credit: ykramarz@cisco.com ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Nx-os	>=8.2<8.3\(2\)
Cisco MDS 9000
Cisco Nx-os	>=7.0\(3\)<7.0\(3\)i7\(6\)
Cisco Nexus 3500
Cisco Nx-os	>=7.0\(3\)i5<7.0\(3\)i7\(6\)
Cisco Nexus 3000
Cisco Nx-os	>=7.0\(3\)f3<7.0\(3\)f3\(5\)
Cisco Nexus 3600
Cisco Nx-os	>=8.3<8.3\(2\)
Cisco Nexus 7000
Cisco Nexus 7700
Cisco Nexus 9000
Cisco Nx-os	>=7.0\(3\)f1<7.0\(3\)f3\(5\)
Cisco Nexus 9500
Cisco Nx-os	>=7.3<8.1\(1b\)
Cisco Nx-os	>=5.2<6.2\(27\)
Cisco Nx-os	<7.0\(3\)i4\(9\)
Cisco Nx-os	>=8.0<8.2\(3\)
Cisco Nx-os	>=7.2<7.3\(3\)d1\(1\)
Cisco Nx-os	<6.2\(22\)
All of
Cisco Nx-os	>=8.2<8.3\(2\)
Cisco MDS 9000
All of
Cisco Nx-os	>=7.0\(3\)<7.0\(3\)i7\(6\)
Cisco Nexus 3500
All of
Cisco Nx-os	>=7.0\(3\)i5<7.0\(3\)i7\(6\)
Cisco Nexus 3000
All of
Cisco Nx-os	>=7.0\(3\)f3<7.0\(3\)f3\(5\)
Cisco Nexus 3600
All of
Cisco Nx-os	>=8.3<8.3\(2\)
Any of
Cisco Nexus 7000
Cisco Nexus 7700
All of
Cisco Nx-os	>=7.0\(3\)i5<7.0\(3\)i7\(6\)
Cisco Nexus 9000
All of
Cisco Nx-os	>=7.0\(3\)f1<7.0\(3\)f3\(5\)
Cisco Nexus 9500
All of
Cisco Nx-os	>=7.3<8.1\(1b\)
Cisco MDS 9000
All of
Cisco Nx-os	>=5.2<6.2\(27\)
Cisco MDS 9000
All of
Cisco Nx-os	<7.0\(3\)i4\(9\)
Cisco Nexus 3000
All of
Cisco Nx-os	>=8.0<8.2\(3\)
Any of
Cisco Nexus 7000
Cisco Nexus 7700
All of
Cisco Nx-os	>=7.2<7.3\(3\)d1\(1\)
Any of
Cisco Nexus 7000
Cisco Nexus 7700
All of
Cisco Nx-os	<6.2\(22\)
Any of
Cisco Nexus 7000
Cisco Nexus 7700
All of
Cisco Nx-os	<7.0\(3\)i4\(9\)
Cisco Nexus 9000

Remedy

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1609

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the vulnerability ID?
The vulnerability ID is CVE-2019-1609.
What is the severity of CVE-2019-1609?
The severity of CVE-2019-1609 is high.
Which software is affected by CVE-2019-1609?
Cisco NX-OS Software versions 7.0(3) to 7.0(3)i7(6) and 8.0 to 8.3 are affected.
How can an attacker exploit CVE-2019-1609?
An authenticated local attacker can exploit CVE-2019-1609 by executing arbitrary commands on the underlying operating system of an affected device.
Are Cisco MDS 9000, Cisco Nexus 3500, Cisco Nexus 3000, Cisco Nexus 3600, Cisco Nexus 7000, Cisco Nexus 7700, Cisco Nexus 9000, Cisco Nexus 9500 affected by CVE-2019-1609?
No, Cisco MDS 9000, Cisco Nexus 3500, Cisco Nexus 3000, Cisco Nexus 3600, Cisco Nexus 7000, Cisco Nexus 7700, Cisco Nexus 9000, and Cisco Nexus 9500 are not affected by CVE-2019-1609.
How do I fix CVE-2019-1609?
Cisco has released software updates to address the vulnerability. Please refer to the Cisco Security Advisory for more information.

collector/nvd-index
agent/references
agent/type
agent/weakness
agent/remedy
agent/severity
agent/title
agent/description
agent/first-publish-date
collector/mitre-cve
source/MITRE
agent/last-modified-date
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/author
agent/softwarecombine
agent/tags
agent/event
vendor/cisco
canonical/cisco nx-os
version/cisco nx-os/8.2
canonical/cisco mds 9000
version/cisco nx-os/7.0\(3\)
canonical/cisco nexus 3500
version/cisco nx-os/7.0\(3\)i5
canonical/cisco nexus 3000
version/cisco nx-os/7.0\(3\)f3
canonical/cisco nexus 3600
version/cisco nx-os/8.3
canonical/cisco nexus 7000
canonical/cisco nexus 7700
canonical/cisco nexus 9000
version/cisco nx-os/7.0\(3\)f1
canonical/cisco nexus 9500
version/cisco nx-os/7.3
version/cisco nx-os/5.2
version/cisco nx-os/8.0
version/cisco nx-os/7.2