CVE-2019-1690: Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability

Q: What is the severity of CVE-2019-1690?

The severity of CVE-2019-1690 is rated as high due to potential unauthorized access by unauthenticated adjacent attackers.

Q: How do I fix CVE-2019-1690?

To fix CVE-2019-1690, upgrade the Cisco Application Policy Infrastructure Controller software to a version higher than 4.2(0.21c).

Q: Which Cisco products are affected by CVE-2019-1690?

CVE-2019-1690 specifically affects the Cisco Application Policy Infrastructure Controller (APIC) software version 4.2(0.21c) and lower.

Q: What type of vulnerability is CVE-2019-1690?

CVE-2019-1690 is a vulnerability related to improper access control in the Cisco Application Policy Infrastructure Controller management interface.

Q: Can CVE-2019-1690 lead to data breaches?

Yes, CVE-2019-1690 can potentially lead to unauthorized access and data breaches if exploited by an attacker.

Published Mar 6, 2019

Updated

A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6 link-local connectivity imposed on the management interface of an affected device. An attacker on the same physical network could exploit this vulnerability by attempting to connect to the IPv6 link-local address on the affected device. A successful exploit could allow the attacker to bypass default access control restrictions on an affected device. Cisco Application Policy Infrastructure Controller (APIC) devices running versions prior to 4.2(0.21c) are affected.

Affected Software

200 affected components

Cisco Application Policy Infrastructure Controller<4.2\(0.21c\)

Cisco Firepower 2110

Cisco Firepower 2120

Cisco Firepower 2130

Cisco Firepower 2140

Cisco Firepower 4110

Cisco Firepower 4112

Cisco Firepower 4115

Cisco Firepower 4120

Cisco Firepower 4125

Cisco Firepower 4140

Cisco Firepower 4145

Cisco Firepower 4150

Cisco Firepower 9300

Cisco Mds 9100

Cisco Mds 9134

Cisco Mds 9509

Cisco Mds 9710

Cisco Nexus 3016

Cisco Nexus 3048

Cisco Nexus 3064

Cisco Nexus 3064-t

Cisco Nexus 31108pc-v

Cisco Nexus 31108tc-v

Cisco Nexus 31128pq

Cisco Nexus 3132c-z

Cisco Nexus 3132q

Cisco Nexus 3132q-v

Cisco Nexus 3132q-xl

Cisco Nexus 3164q

Cisco Nexus 3172

Cisco Nexus 3172pq-xl

Cisco Nexus 3172tq

Cisco Nexus 3172tq-32t

Cisco Nexus 3172tq-xl

Cisco Nexus 3232c

Cisco Nexus 3264c-e

Cisco Nexus 3264q

Cisco Nexus 3408-s

Cisco Nexus 34180yc

Cisco Nexus 3432d-s

Cisco Nexus 3464c

Cisco Nexus 3524

Cisco Nexus 3524-x

Cisco Nexus 3524-xl

Cisco Nexus 3548

Cisco Nexus 3548-x

Cisco Nexus 3548-xl

Cisco Nexus 36180yc-r

Cisco Nexus 3636c-r

Cisco Nexus 5010

Cisco Nexus 5020

Cisco Nexus 5548p

Cisco Nexus 5548up

Cisco Nexus 5596t

Cisco Nexus 5596up

Cisco Nexus 56128p

Cisco Nexus 5624q

Cisco Nexus 5648q

Cisco Nexus 5672up

Cisco Nexus 5696q

Cisco Nexus 7000

Cisco Nexus 7700

Cisco Nexus 9000v

Cisco Nexus 92160yc-x

Cisco Nexus 92300yc

Cisco Nexus 92304qc

Cisco Nexus 92348gc-x

Cisco Nexus 9236c

Cisco Nexus 9272q

Cisco Nexus 93108tc-ex

Cisco Nexus 93108tc-fx

Cisco Nexus 93120tx

Cisco Nexus 93128tx

Cisco Nexus 93180lc-ex

Cisco Nexus 93180yc-ex

Cisco Nexus 93180yc-fx

Cisco Nexus 93216tc-fx2

Cisco Nexus 93240yc-fx2

Cisco Nexus 9332c

Cisco Nexus 9332pq

Cisco Nexus 93360yc-fx2

Cisco Nexus 9336c-fx2

Cisco Nexus 9336pq Aci Spine

Cisco Nexus 9348gc-fxp

Cisco Nexus 9364c

Cisco Nexus 9372px

Cisco Nexus 9372px-e

Cisco Nexus 9372tx

Cisco Nexus 9372tx-e

Cisco Nexus 9396px

Cisco Nexus 9396tx

Cisco Nexus 9504

Cisco Nexus 9508

Cisco Nexus 9516

Cisco Ucs 6248up

Cisco Ucs 6296up

Cisco Ucs 6324

Cisco Ucs 6332

Cisco UCS 6400

All of the following