CVE-2019-1690: Cisco Application Policy Infrastructure Controller IPv6 Link-Local Address Vulnerability
First published: Wed Mar 06 2019(Updated: )
A vulnerability in the management interface of Cisco Application Policy Infrastructure Controller (APIC) software could allow an unauthenticated, adjacent attacker to gain unauthorized access on an affected device. The vulnerability is due to a lack of proper access control mechanisms for IPv6 link-local connectivity imposed on the management interface of an affected device. An attacker on the same physical network could exploit this vulnerability by attempting to connect to the IPv6 link-local address on the affected device. A successful exploit could allow the attacker to bypass default access control restrictions on an affected device. Cisco Application Policy Infrastructure Controller (APIC) devices running versions prior to 4.2(0.21c) are affected.
Credit: ykramarz@cisco.com ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Application Policy Infrastructure Controller | <4.2\(0.21c\) | |
| Cisco Firepower 2110 | ||
| Cisco Firepower 2120 | ||
| Cisco Firepower 2130 | ||
| Cisco Firepower 2140 | ||
| Cisco Firepower 4110 | ||
| Cisco Firepower 4112 | ||
| Cisco Firepower 4115 | ||
| Cisco Firepower 4120 | ||
| Cisco Firepower 4125 | ||
| Cisco Firepower 4140 | ||
| Cisco Firepower 4145 | ||
| Cisco Firepower 4150 | ||
| Cisco Firepower 9300 | ||
| Cisco Mds 9100 | ||
| Cisco Mds 9134 | ||
| Cisco Mds 9509 | ||
| Cisco Mds 9710 | ||
| Cisco Nexus 3016 | ||
| Cisco Nexus 3048 | ||
| Cisco Nexus 3064 | ||
| Cisco Nexus 3064-t | ||
| Cisco Nexus 31108pc-v | ||
| Cisco Nexus 31108tc-v | ||
| Cisco Nexus 31128pq | ||
| Cisco Nexus 3132c-z | ||
| Cisco Nexus 3132q | ||
| Cisco Nexus 3132q-v | ||
| Cisco Nexus 3132q-xl | ||
| Cisco Nexus 3164q | ||
| Cisco Nexus 3172 | ||
| Cisco Nexus 3172pq-xl | ||
| Cisco Nexus 3172tq | ||
| Cisco Nexus 3172tq-32t | ||
| Cisco Nexus 3172tq-xl | ||
| Cisco Nexus 3232c | ||
| Cisco Nexus 3264c-e | ||
| Cisco Nexus 3264q | ||
| Cisco Nexus 3408-s | ||
| Cisco Nexus 34180yc | ||
| Cisco Nexus 3432d-s | ||
| Cisco Nexus 3464c | ||
| Cisco Nexus 3524 | ||
| Cisco Nexus 3524-x | ||
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3548 | ||
| Cisco Nexus 3548-x | ||
| Cisco Nexus 3548-xl | ||
| Cisco Nexus 36180yc-r | ||
| Cisco Nexus 3636c-r | ||
| Cisco Nexus 5010 | ||
| Cisco Nexus 5020 | ||
| Cisco Nexus 5548p | ||
| Cisco Nexus 5548up | ||
| Cisco Nexus 5596t | ||
| Cisco Nexus 5596up | ||
| Cisco Nexus 56128p | ||
| Cisco Nexus 5624q | ||
| Cisco Nexus 5648q | ||
| Cisco Nexus 5672up | ||
| Cisco Nexus 5696q | ||
| Cisco Nexus 7000 | ||
| Cisco Nexus 7700 | ||
| Cisco Nexus 9000v | ||
| Cisco Nexus 92160yc-x | ||
| Cisco Nexus 92300yc | ||
| Cisco Nexus 92304qc | ||
| Cisco Nexus 92348gc-x | ||
| Cisco Nexus 9236c | ||
| Cisco Nexus 9272q | ||
| Cisco Nexus 93108tc-ex | ||
| Cisco Nexus 93108tc-fx | ||
| Cisco Nexus 93120tx | ||
| Cisco Nexus 93128tx | ||
| Cisco Nexus 93180lc-ex | ||
| Cisco Nexus 93180yc-ex | ||
| Cisco Nexus 93180yc-fx | ||
| Cisco Nexus 93216tc-fx2 | ||
| Cisco Nexus 93240yc-fx2 | ||
| Cisco Nexus 9332c | ||
| Cisco Nexus 9332pq | ||
| Cisco Nexus 93360yc-fx2 | ||
| Cisco Nexus 9336c-fx2 | ||
| Cisco Nexus 9336pq Aci Spine | ||
| Cisco Nexus 9348gc-fxp | ||
| Cisco Nexus 9364c | ||
| Cisco Nexus 9372px | ||
| Cisco Nexus 9372px-e | ||
| Cisco Nexus 9372tx | ||
| Cisco Nexus 9372tx-e | ||
| Cisco Nexus 9396px | ||
| Cisco Nexus 9396tx | ||
| Cisco Nexus 9504 | ||
| Cisco Nexus 9508 | ||
| Cisco Nexus 9516 | ||
| Cisco Ucs 6248up | ||
| Cisco Ucs 6296up | ||
| Cisco Ucs 6324 | ||
| Cisco Ucs 6332 | ||
| Cisco Ucs 6400 | ||
| All of | ||
| Cisco Application Policy Infrastructure Controller | <4.2\(0.21c\) | |
| Any of | ||
| Cisco Firepower 2110 | ||
| Cisco Firepower 2120 | ||
| Cisco Firepower 2130 | ||
| Cisco Firepower 2140 | ||
| Cisco Firepower 4110 | ||
| Cisco Firepower 4112 | ||
| Cisco Firepower 4115 | ||
| Cisco Firepower 4120 | ||
| Cisco Firepower 4125 | ||
| Cisco Firepower 4140 | ||
| Cisco Firepower 4145 | ||
| Cisco Firepower 4150 | ||
| Cisco Firepower 9300 | ||
| Cisco Mds 9100 | ||
| Cisco Mds 9134 | ||
| Cisco Mds 9509 | ||
| Cisco Mds 9710 | ||
| Cisco Nexus 3016 | ||
| Cisco Nexus 3048 | ||
| Cisco Nexus 3064 | ||
| Cisco Nexus 3064-t | ||
| Cisco Nexus 31108pc-v | ||
| Cisco Nexus 31108tc-v | ||
| Cisco Nexus 31128pq | ||
| Cisco Nexus 3132c-z | ||
| Cisco Nexus 3132q | ||
| Cisco Nexus 3132q-v | ||
| Cisco Nexus 3132q-xl | ||
| Cisco Nexus 3164q | ||
| Cisco Nexus 3172 | ||
| Cisco Nexus 3172pq-xl | ||
| Cisco Nexus 3172tq | ||
| Cisco Nexus 3172tq-32t | ||
| Cisco Nexus 3172tq-xl | ||
| Cisco Nexus 3232c | ||
| Cisco Nexus 3264c-e | ||
| Cisco Nexus 3264q | ||
| Cisco Nexus 3408-s | ||
| Cisco Nexus 34180yc | ||
| Cisco Nexus 3432d-s | ||
| Cisco Nexus 3464c | ||
| Cisco Nexus 3524 | ||
| Cisco Nexus 3524-x | ||
| Cisco Nexus 3524-xl | ||
| Cisco Nexus 3548 | ||
| Cisco Nexus 3548-x | ||
| Cisco Nexus 3548-xl | ||
| Cisco Nexus 36180yc-r | ||
| Cisco Nexus 3636c-r | ||
| Cisco Nexus 5010 | ||
| Cisco Nexus 5020 | ||
| Cisco Nexus 5548p | ||
| Cisco Nexus 5548up | ||
| Cisco Nexus 5596t | ||
| Cisco Nexus 5596up | ||
| Cisco Nexus 56128p | ||
| Cisco Nexus 5624q | ||
| Cisco Nexus 5648q | ||
| Cisco Nexus 5672up | ||
| Cisco Nexus 5696q | ||
| Cisco Nexus 7000 | ||
| Cisco Nexus 7700 | ||
| Cisco Nexus 9000v | ||
| Cisco Nexus 92160yc-x | ||
| Cisco Nexus 92300yc | ||
| Cisco Nexus 92304qc | ||
| Cisco Nexus 92348gc-x | ||
| Cisco Nexus 9236c | ||
| Cisco Nexus 9272q | ||
| Cisco Nexus 93108tc-ex | ||
| Cisco Nexus 93108tc-fx | ||
| Cisco Nexus 93120tx | ||
| Cisco Nexus 93128tx | ||
| Cisco Nexus 93180lc-ex | ||
| Cisco Nexus 93180yc-ex | ||
| Cisco Nexus 93180yc-fx | ||
| Cisco Nexus 93216tc-fx2 | ||
| Cisco Nexus 93240yc-fx2 | ||
| Cisco Nexus 9332c | ||
| Cisco Nexus 9332pq | ||
| Cisco Nexus 93360yc-fx2 | ||
| Cisco Nexus 9336c-fx2 | ||
| Cisco Nexus 9336pq Aci Spine | ||
| Cisco Nexus 9348gc-fxp | ||
| Cisco Nexus 9364c | ||
| Cisco Nexus 9372px | ||
| Cisco Nexus 9372px-e | ||
| Cisco Nexus 9372tx | ||
| Cisco Nexus 9372tx-e | ||
| Cisco Nexus 9396px | ||
| Cisco Nexus 9396tx | ||
| Cisco Nexus 9504 | ||
| Cisco Nexus 9508 | ||
| Cisco Nexus 9516 | ||
| Cisco Ucs 6248up | ||
| Cisco Ucs 6296up | ||
| Cisco Ucs 6324 | ||
| Cisco Ucs 6332 | ||
| Cisco Ucs 6400 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/type
- agent/title
- agent/weakness
- agent/severity
- agent/description
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/author
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/cisco
- canonical/cisco application policy infrastructure controller
- canonical/cisco firepower 2110
- canonical/cisco firepower 2120
- canonical/cisco firepower 2130
- canonical/cisco firepower 2140
- canonical/cisco firepower 4110
- canonical/cisco firepower 4112
- canonical/cisco firepower 4115
- canonical/cisco firepower 4120
- canonical/cisco firepower 4125
- canonical/cisco firepower 4140
- canonical/cisco firepower 4145
- canonical/cisco firepower 4150
- canonical/cisco firepower 9300
- canonical/cisco mds 9100
- canonical/cisco mds 9134
- canonical/cisco mds 9509
- canonical/cisco mds 9710
- canonical/cisco nexus 3016
- canonical/cisco nexus 3048
- canonical/cisco nexus 3064
- canonical/cisco nexus 3064-t
- canonical/cisco nexus 31108pc-v
- canonical/cisco nexus 31108tc-v
- canonical/cisco nexus 31128pq
- canonical/cisco nexus 3132c-z
- canonical/cisco nexus 3132q
- canonical/cisco nexus 3132q-v
- canonical/cisco nexus 3132q-xl
- canonical/cisco nexus 3164q
- canonical/cisco nexus 3172
- canonical/cisco nexus 3172pq-xl
- canonical/cisco nexus 3172tq
- canonical/cisco nexus 3172tq-32t
- canonical/cisco nexus 3172tq-xl
- canonical/cisco nexus 3232c
- canonical/cisco nexus 3264c-e
- canonical/cisco nexus 3264q
- canonical/cisco nexus 3408-s
- canonical/cisco nexus 34180yc
- canonical/cisco nexus 3432d-s
- canonical/cisco nexus 3464c
- canonical/cisco nexus 3524
- canonical/cisco nexus 3524-x
- canonical/cisco nexus 3524-xl
- canonical/cisco nexus 3548
- canonical/cisco nexus 3548-x
- canonical/cisco nexus 3548-xl
- canonical/cisco nexus 36180yc-r
- canonical/cisco nexus 3636c-r
- canonical/cisco nexus 5010
- canonical/cisco nexus 5020
- canonical/cisco nexus 5548p
- canonical/cisco nexus 5548up
- canonical/cisco nexus 5596t
- canonical/cisco nexus 5596up
- canonical/cisco nexus 56128p
- canonical/cisco nexus 5624q
- canonical/cisco nexus 5648q
- canonical/cisco nexus 5672up
- canonical/cisco nexus 5696q
- canonical/cisco nexus 7000
- canonical/cisco nexus 7700
- canonical/cisco nexus 9000v
- canonical/cisco nexus 92160yc-x
- canonical/cisco nexus 92300yc
- canonical/cisco nexus 92304qc
- canonical/cisco nexus 92348gc-x
- canonical/cisco nexus 9236c
- canonical/cisco nexus 9272q
- canonical/cisco nexus 93108tc-ex
- canonical/cisco nexus 93108tc-fx
- canonical/cisco nexus 93120tx
- canonical/cisco nexus 93128tx
- canonical/cisco nexus 93180lc-ex
- canonical/cisco nexus 93180yc-ex
- canonical/cisco nexus 93180yc-fx
- canonical/cisco nexus 93216tc-fx2
- canonical/cisco nexus 93240yc-fx2
- canonical/cisco nexus 9332c
- canonical/cisco nexus 9332pq
- canonical/cisco nexus 93360yc-fx2
- canonical/cisco nexus 9336c-fx2
- canonical/cisco nexus 9336pq aci spine
- canonical/cisco nexus 9348gc-fxp
- canonical/cisco nexus 9364c
- canonical/cisco nexus 9372px
- canonical/cisco nexus 9372px-e
- canonical/cisco nexus 9372tx
- canonical/cisco nexus 9372tx-e
- canonical/cisco nexus 9396px
- canonical/cisco nexus 9396tx
- canonical/cisco nexus 9504
- canonical/cisco nexus 9508
- canonical/cisco nexus 9516
- canonical/cisco ucs 6248up
- canonical/cisco ucs 6296up
- canonical/cisco ucs 6324
- canonical/cisco ucs 6332
- canonical/cisco ucs 6400