CVE-2019-1690: Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability
First published: Wed Mar 06 2019(Updated: )
A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6 link-local connectivity imposed on the management interface of an affected device. An attacker on the same physical network could exploit this vulnerability by attempting to connect to the IPv6 link-local address on the affected device. A successful exploit could allow the attacker to bypass default access control restrictions on an affected device. Cisco Application Policy Infrastructure Controller (APIC) devices running versions prior to 4.2(0.21c) are affected.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Cisco Application Policy Infrastructure Controller (APIC) | <4.2\(0.21c\) | |
| Any of | ||
| Cisco Firepower 2110 | ||
| Cisco Firepower 2120 | ||
| Cisco Firepower 2130 | ||
| Cisco Firepower 2140 | ||
| Cisco Firepower 4110 Next-Generation Firewall | ||
| Cisco Firepower 4112 Firmware | ||
| Cisco Firepower 4115 | ||
| Cisco Firepower 4120 Next-Generation Firewall | ||
| Cisco Firepower 4125 firmware | ||
| Cisco Firepower 4140 Next-Generation Firewall | ||
| Cisco Firepower 4145 firmware | ||
| Cisco Firepower 4150 Next-Generation Firewall | ||
| Cisco Firepower 9300 firmware | ||
| Cisco MDS 9100 | ||
| Cisco MDS 9134 | ||
| Cisco MDS 9500 | ||
| Cisco MDS 9710 Firmware | ||
| Cisco Nexus 3016Q Firmware | ||
| Cisco Nexus 3048 Firmware | ||
| Cisco Nexus 3064 Firmware | ||
| Cisco Nexus 3064 | ||
| Cisco Nexus 31108PC-V Firmware | ||
| Cisco Nexus 31108TC-V Firmware | ||
| Cisco Nexus 31128PQ | ||
| Cisco Nexus 3132C-Z Firmware | ||
| Cisco Nexus 3132Q-XL | ||
| Cisco Nexus 3132Q-V Firmware | ||
| Cisco Nexus 3132Q-XL Firmware | ||
| Cisco Nexus 3164Q Firmware | ||
| Cisco Nexus 3172 Firmware | ||
| Cisco Nexus 3172PQ-XL Firmware | ||
| Cisco Nexus 3172TQ Firmware | ||
| Cisco Nexus 3172TQ-XL | ||
| Cisco Nexus 3172TQ-XL Firmware | ||
| Cisco Nexus 3232C | ||
| Cisco Nexus 3264C-E Firmware | ||
| Cisco Nexus 3264Q Firmware | ||
| Cisco Nexus 3408-S Firmware | ||
| Cisco Nexus 34180YC Firmware | ||
| Cisco Nexus 3432D-S Firmware | ||
| Cisco Nexus 3464C Firmware | ||
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3524-XL Firmware | ||
| Cisco Nexus 3548-X/XL Firmware | ||
| Cisco Nexus 3548-X/XL | ||
| Cisco Nexus 3548-X/XL | ||
| Cisco Nexus 36180YC-R Firmware | ||
| Cisco Nexus 3636C-R Firmware | ||
| Cisco Nexus 5010 | ||
| Cisco Nexus 5020 | ||
| Cisco Nexus 5548P Firmware | ||
| Cisco Nexus 5548UP Firmware | ||
| Cisco Nexus 5596T Firmware | ||
| Cisco Nexus 5596UP Firmware | ||
| Cisco 56128p | ||
| Cisco Nexus 5624Q Firmware | ||
| Cisco Nexus 5648Q Firmware | ||
| Cisco Nexus 5672UP-16G | ||
| Cisco Nexus 5696Q Firmware | ||
| Cisco NEXUS 7000 Series Switch | ||
| Cisco Nexus 7700 series | ||
| Cisco NX-OS Nexus 9000 Series | ||
| Cisco Nexus 92160YC Switch | ||
| Cisco Nexus 92300YC Firmware | ||
| Cisco Nexus 92304QC Switch | ||
| Cisco Nexus 92348GC-X Switch | ||
| Cisco Nexus 9236C Switch | ||
| Cisco Nexus 9272Q Switch | ||
| Cisco Nexus | ||
| Cisco Nexus 93108TC-FX Switch | ||
| Cisco Nexus 93120TX Firmware | ||
| Cisco Nexus 93128 Firmware | ||
| Cisco Nexus 93180LC-EX Switch | ||
| Cisco Nexus 93180YC-EX-24 | ||
| Cisco Nexus 93180YC-FX Firmware | ||
| Cisco Nexus 93216TC-FX2 Firmware | ||
| Cisco Nexus 93240YC-FX2 Firmware | ||
| Cisco Nexus 9332C Firmware | ||
| Cisco Nexus 9332PQ Firmware | ||
| Cisco Nexus 93360YC-FX2 | ||
| Cisco Nexus 9336C-FX2 Firmware | ||
| Cisco Nexus N9336PQ-X | ||
| Cisco Nexus 9348GC-FXP Firmware | ||
| Cisco Nexus 9364c-h1 | ||
| Cisco Nexus 9372PX-E | ||
| Cisco Nexus 9372PX-E Firmware | ||
| Cisco Nexus 9372TX | ||
| Cisco Nexus 9372TX-E Switch | ||
| Cisco Nexus 9396PX Firmware | ||
| Cisco Nexus 9396TX Firmware | ||
| Cisco Nexus 9504 firmware | ||
| Cisco Nexus 9508 | ||
| Cisco Nexus 9516 firmware | ||
| Cisco UCS 6248UP Firmware | ||
| Cisco UCS 6296UP Firmware | ||
| Cisco UCS 6324 firmware | ||
| Cisco UCS 6332 | ||
| Cisco UCS 6400 | ||
| Cisco Application Policy Infrastructure Controller (APIC) | <4.2\(0.21c\) | |
| Cisco Firepower 2110 | ||
| Cisco Firepower 2120 | ||
| Cisco Firepower 2130 | ||
| Cisco Firepower 2140 | ||
| Cisco Firepower 4110 Next-Generation Firewall | ||
| Cisco Firepower 4112 Firmware | ||
| Cisco Firepower 4115 | ||
| Cisco Firepower 4120 Next-Generation Firewall | ||
| Cisco Firepower 4125 firmware | ||
| Cisco Firepower 4140 Next-Generation Firewall | ||
| Cisco Firepower 4145 firmware | ||
| Cisco Firepower 4150 Next-Generation Firewall | ||
| Cisco Firepower 9300 firmware | ||
| Cisco MDS 9100 | ||
| Cisco MDS 9134 | ||
| Cisco MDS 9500 | ||
| Cisco MDS 9710 Firmware | ||
| Cisco Nexus 3016Q Firmware | ||
| Cisco Nexus 3048 Firmware | ||
| Cisco Nexus 3064 Firmware | ||
| Cisco Nexus 3064 | ||
| Cisco Nexus 31108PC-V Firmware | ||
| Cisco Nexus 31108TC-V Firmware | ||
| Cisco Nexus 31128PQ | ||
| Cisco Nexus 3132C-Z Firmware | ||
| Cisco Nexus 3132Q-XL | ||
| Cisco Nexus 3132Q-V Firmware | ||
| Cisco Nexus 3132Q-XL Firmware | ||
| Cisco Nexus 3164Q Firmware | ||
| Cisco Nexus 3172 Firmware | ||
| Cisco Nexus 3172PQ-XL Firmware | ||
| Cisco Nexus 3172TQ Firmware | ||
| Cisco Nexus 3172TQ-XL | ||
| Cisco Nexus 3172TQ-XL Firmware | ||
| Cisco Nexus 3232C | ||
| Cisco Nexus 3264C-E Firmware | ||
| Cisco Nexus 3264Q Firmware | ||
| Cisco Nexus 3408-S Firmware | ||
| Cisco Nexus 34180YC Firmware | ||
| Cisco Nexus 3432D-S Firmware | ||
| Cisco Nexus 3464C Firmware | ||
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3524-XL Firmware | ||
| Cisco Nexus 3548-X/XL Firmware | ||
| Cisco Nexus 3548-X/XL | ||
| Cisco Nexus 3548-X/XL | ||
| Cisco Nexus 36180YC-R Firmware | ||
| Cisco Nexus 3636C-R Firmware | ||
| Cisco Nexus 5010 | ||
| Cisco Nexus 5020 | ||
| Cisco Nexus 5548P Firmware | ||
| Cisco Nexus 5548UP Firmware | ||
| Cisco Nexus 5596T Firmware | ||
| Cisco Nexus 5596UP Firmware | ||
| Cisco 56128p | ||
| Cisco Nexus 5624Q Firmware | ||
| Cisco Nexus 5648Q Firmware | ||
| Cisco Nexus 5672UP-16G | ||
| Cisco Nexus 5696Q Firmware | ||
| Cisco NEXUS 7000 Series Switch | ||
| Cisco Nexus 7700 series | ||
| Cisco NX-OS Nexus 9000 Series | ||
| Cisco Nexus 92160YC Switch | ||
| Cisco Nexus 92300YC Firmware | ||
| Cisco Nexus 92304QC Switch | ||
| Cisco Nexus 92348GC-X Switch | ||
| Cisco Nexus 9236C Switch | ||
| Cisco Nexus 9272Q Switch | ||
| Cisco Nexus | ||
| Cisco Nexus 93108TC-FX Switch | ||
| Cisco Nexus 93120TX Firmware | ||
| Cisco Nexus 93128 Firmware | ||
| Cisco Nexus 93180LC-EX Switch | ||
| Cisco Nexus 93180YC-EX-24 | ||
| Cisco Nexus 93180YC-FX Firmware | ||
| Cisco Nexus 93216TC-FX2 Firmware | ||
| Cisco Nexus 93240YC-FX2 Firmware | ||
| Cisco Nexus 9332C Firmware | ||
| Cisco Nexus 9332PQ Firmware | ||
| Cisco Nexus 93360YC-FX2 | ||
| Cisco Nexus 9336C-FX2 Firmware | ||
| Cisco Nexus N9336PQ-X | ||
| Cisco Nexus 9348GC-FXP Firmware | ||
| Cisco Nexus 9364c-h1 | ||
| Cisco Nexus 9372PX-E | ||
| Cisco Nexus 9372PX-E Firmware | ||
| Cisco Nexus 9372TX | ||
| Cisco Nexus 9372TX-E Switch | ||
| Cisco Nexus 9396PX Firmware | ||
| Cisco Nexus 9396TX Firmware | ||
| Cisco Nexus 9504 firmware | ||
| Cisco Nexus 9508 | ||
| Cisco Nexus 9516 firmware | ||
| Cisco UCS 6248UP Firmware | ||
| Cisco UCS 6296UP Firmware | ||
| Cisco UCS 6324 firmware | ||
| Cisco UCS 6332 | ||
| Cisco UCS 6400 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2019-1690?
The severity of CVE-2019-1690 is rated as high due to potential unauthorized access by unauthenticated adjacent attackers.
How do I fix CVE-2019-1690?
To fix CVE-2019-1690, upgrade the Cisco Application Policy Infrastructure Controller software to a version higher than 4.2(0.21c).
Which Cisco products are affected by CVE-2019-1690?
CVE-2019-1690 specifically affects the Cisco Application Policy Infrastructure Controller (APIC) software version 4.2(0.21c) and lower.
What type of vulnerability is CVE-2019-1690?
CVE-2019-1690 is a vulnerability related to improper access control in the Cisco Application Policy Infrastructure Controller management interface.
Can CVE-2019-1690 lead to data breaches?
Yes, CVE-2019-1690 can potentially lead to unauthorized access and data breaches if exploited by an attacker.
- agent/references
- agent/type
- agent/title
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/cisco
- canonical/cisco application policy infrastructure controller (apic)
- canonical/cisco firepower 2110
- canonical/cisco firepower 2120
- canonical/cisco firepower 2130
- canonical/cisco firepower 2140
- canonical/cisco firepower 4110 next-generation firewall
- canonical/cisco firepower 4112 firmware
- canonical/cisco firepower 4115
- canonical/cisco firepower 4120 next-generation firewall
- canonical/cisco firepower 4125 firmware
- canonical/cisco firepower 4140 next-generation firewall
- canonical/cisco firepower 4145 firmware
- canonical/cisco firepower 4150 next-generation firewall
- canonical/cisco firepower 9300 firmware
- canonical/cisco mds 9100
- canonical/cisco mds 9134
- canonical/cisco mds 9500
- canonical/cisco mds 9710 firmware
- canonical/cisco nexus 3016q firmware
- canonical/cisco nexus 3048 firmware
- canonical/cisco nexus 3064 firmware
- canonical/cisco nexus 3064
- canonical/cisco nexus 31108pc-v firmware
- canonical/cisco nexus 31108tc-v firmware
- canonical/cisco nexus 31128pq
- canonical/cisco nexus 3132c-z firmware
- canonical/cisco nexus 3132q-xl
- canonical/cisco nexus 3132q-v firmware
- canonical/cisco nexus 3132q-xl firmware
- canonical/cisco nexus 3164q firmware
- canonical/cisco nexus 3172 firmware
- canonical/cisco nexus 3172pq-xl firmware
- canonical/cisco nexus 3172tq firmware
- canonical/cisco nexus 3172tq-xl
- canonical/cisco nexus 3172tq-xl firmware
- canonical/cisco nexus 3232c
- canonical/cisco nexus 3264c-e firmware
- canonical/cisco nexus 3264q firmware
- canonical/cisco nexus 3408-s firmware
- canonical/cisco nexus 34180yc firmware
- canonical/cisco nexus 3432d-s firmware
- canonical/cisco nexus 3464c firmware
- canonical/cisco nexus 3524-xl
- canonical/cisco nexus 3524-xl firmware
- canonical/cisco nexus 3548-x/xl firmware
- canonical/cisco nexus 3548-x/xl
- canonical/cisco nexus 36180yc-r firmware
- canonical/cisco nexus 3636c-r firmware
- canonical/cisco nexus 5010
- canonical/cisco nexus 5020
- canonical/cisco nexus 5548p firmware
- canonical/cisco nexus 5548up firmware
- canonical/cisco nexus 5596t firmware
- canonical/cisco nexus 5596up firmware
- canonical/cisco 56128p
- canonical/cisco nexus 5624q firmware
- canonical/cisco nexus 5648q firmware
- canonical/cisco nexus 5672up-16g
- canonical/cisco nexus 5696q firmware
- canonical/cisco nexus 7000 series switch
- canonical/cisco nexus 7700 series
- canonical/cisco nx-os nexus 9000 series
- canonical/cisco nexus 92160yc switch
- canonical/cisco nexus 92300yc firmware
- canonical/cisco nexus 92304qc switch
- canonical/cisco nexus 92348gc-x switch
- canonical/cisco nexus 9236c switch
- canonical/cisco nexus 9272q switch
- canonical/cisco nexus
- canonical/cisco nexus 93108tc-fx switch
- canonical/cisco nexus 93120tx firmware
- canonical/cisco nexus 93128 firmware
- canonical/cisco nexus 93180lc-ex switch
- canonical/cisco nexus 93180yc-ex-24
- canonical/cisco nexus 93180yc-fx firmware
- canonical/cisco nexus 93216tc-fx2 firmware
- canonical/cisco nexus 93240yc-fx2 firmware
- canonical/cisco nexus 9332c firmware
- canonical/cisco nexus 9332pq firmware
- canonical/cisco nexus 93360yc-fx2
- canonical/cisco nexus 9336c-fx2 firmware
- canonical/cisco nexus n9336pq-x
- canonical/cisco nexus 9348gc-fxp firmware
- canonical/cisco nexus 9364c-h1
- canonical/cisco nexus 9372px-e
- canonical/cisco nexus 9372px-e firmware
- canonical/cisco nexus 9372tx
- canonical/cisco nexus 9372tx-e switch
- canonical/cisco nexus 9396px firmware
- canonical/cisco nexus 9396tx firmware
- canonical/cisco nexus 9504 firmware
- canonical/cisco nexus 9508
- canonical/cisco nexus 9516 firmware
- canonical/cisco ucs 6248up firmware
- canonical/cisco ucs 6296up firmware
- canonical/cisco ucs 6324 firmware
- canonical/cisco ucs 6332
- canonical/cisco ucs 6400