What is CVE-2019-1733?

CVE-2019-1733 is a vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software that could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface.

What is the severity of CVE-2019-1733?

The severity of CVE-2019-1733 is medium with a CVSS score of 5.4.

Is Cisco Nexus 3000 affected by CVE-2019-1733?

No, Cisco Nexus 3000 is not affected by CVE-2019-1733.

How can I fix CVE-2019-1733?

To fix CVE-2019-1733, Cisco recommends upgrading to a fixed software release.

Vulnerability/
CVE-2019-1733

medium

5.4

CWE

15/5/2019

9/10/2019

CVE-2019-1733: XSS

Q: How does CVE-2019-1733 impact Cisco NX-OS Software?

CVE-2019-1733 allows an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device running Cisco NX-OS Software.

First published: Wed May 15 2019(Updated: )

A vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device. The vulnerability is due to insufficient validation of user-supplied input by the NX-API Sandbox interface. An attacker could exploit this vulnerability by persuading a user of the NX-API Sandbox interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected NX-API Sandbox interface.

Credit: ykramarz@cisco.com

Affected Software	Affected Version	How to fix
Cisco Nx-os	>=7.0\(3\)i7<7.0\(3\)i7\(4\)
Cisco Nexus 3000
Cisco Nexus 3100
Cisco Nexus 3100-z
Cisco Nexus 3100v
Cisco Nexus 3200
Cisco Nexus 3400
Cisco Nexus 3500
Cisco Nexus 3524-x
Cisco Nexus 3524-xl
Cisco Nexus 3548-x
Cisco Nexus 3548-xl
Cisco Nexus 3600
Cisco Nexus 9000
Cisco Nexus 9200
Cisco Nexus 9300
Cisco Nexus 9500

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is CVE-2019-1733?
CVE-2019-1733 is a vulnerability in the NX API (NX-API) Sandbox interface for Cisco NX-OS Software that could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface.
What is the severity of CVE-2019-1733?
The severity of CVE-2019-1733 is medium with a CVSS score of 5.4.
How does CVE-2019-1733 impact Cisco NX-OS Software?
CVE-2019-1733 allows an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the NX-API Sandbox interface of an affected device running Cisco NX-OS Software.
Is Cisco Nexus 3000 affected by CVE-2019-1733?
No, Cisco Nexus 3000 is not affected by CVE-2019-1733.
How can I fix CVE-2019-1733?
To fix CVE-2019-1733, Cisco recommends upgrading to a fixed software release.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.