CVE-2019-1783: Cisco NX-OS Software Command Injection Vulnerability
First published: Wed May 15 2019(Updated: )
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco NX-OS | <7.3\(4\)n1\(1\) | |
| Cisco Nexus 5548P Firmware | ||
| Cisco Nexus 5548UP Firmware | ||
| Cisco Nexus 5596T Firmware | ||
| Cisco Nexus 5596UP Firmware | ||
| Cisco 56128p | ||
| Cisco Nexus 5624Q Firmware | ||
| Cisco Nexus 5648Q Firmware | ||
| Cisco Nexus 5672UP-16G | ||
| Cisco Nexus 5696Q Firmware | ||
| Cisco Nexus 6001 Firmware | ||
| Cisco Nexus 6004 Firmware | ||
| Cisco NX-OS | >=7.2<7.3\(3\)d1\(1\) | |
| Cisco NX-OS | >=8.0<8.3\(1\) | |
| Cisco NEXUS 7000 Series Switch | ||
| Cisco Nexus 7700 series |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-1783?
CVE-2019-1783 is a vulnerability in the CLI of Cisco NX-OS Software that allows an authenticated local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with root privilege.
How severe is CVE-2019-1783?
CVE-2019-1783 has a severity score of 6.7 (high).
Which software is affected by CVE-2019-1783?
Cisco NX-OS Software versions up to 7.3(4)n1(1), as well as versions between 7.2 and 7.3(3)d1(1) and versions between 8.0 and 8.3(1), are affected by CVE-2019-1783.
How can I fix CVE-2019-1783?
To fix CVE-2019-1783, Cisco recommends upgrading to a fixed version of Cisco NX-OS Software.
Where can I find more information about CVE-2019-1783?
More information about CVE-2019-1783 can be found at the following links: [SecurityFocus](http://www.securityfocus.com/bid/108370), [Cisco Security Advisory](https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-cmdinj-1783).
- agent/references
- agent/type
- agent/title
- agent/weakness
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco nx-os
- canonical/cisco nexus 5548p firmware
- canonical/cisco nexus 5548up firmware
- canonical/cisco nexus 5596t firmware
- canonical/cisco nexus 5596up firmware
- canonical/cisco 56128p
- canonical/cisco nexus 5624q firmware
- canonical/cisco nexus 5648q firmware
- canonical/cisco nexus 5672up-16g
- canonical/cisco nexus 5696q firmware
- canonical/cisco nexus 6001 firmware
- canonical/cisco nexus 6004 firmware
- version/cisco nx-os/7.2
- version/cisco nx-os/8.0
- canonical/cisco nexus 7000 series switch
- canonical/cisco nexus 7700 series