CVE-2019-1784: Cisco NX-OS Software Command Injection Vulnerability
First published: Wed May 15 2019(Updated: )
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco NX-OS | <7.3\(5\)n1\(1\) | |
| Cisco Nexus 5548P Firmware | ||
| Cisco Nexus 5548UP Firmware | ||
| Cisco Nexus 5596T Firmware | ||
| Cisco Nexus 5596UP Firmware | ||
| Cisco 56128p | ||
| Cisco Nexus 5624Q Firmware | ||
| Cisco Nexus 5648Q Firmware | ||
| Cisco Nexus 5672UP-16G | ||
| Cisco Nexus 5696Q Firmware | ||
| Cisco Nexus 6001 Firmware | ||
| Cisco Nexus 6004 Firmware | ||
| Cisco NX-OS | >=7.2<7.3\(3\)d1\(1\) | |
| Cisco NX-OS | >=8.0<8.2\(3\) | |
| Cisco NX-OS | >=8.3<8.3\(1\) | |
| Cisco 7000 | ||
| Cisco 7700 | ||
| Cisco NX-OS | <4.0\(1a\) | |
| Cisco UCS 6248UP | ||
| Cisco UCS 6296UP | ||
| Cisco UCS 6324 firmware | ||
| Cisco UCS 6332 | ||
| Cisco UCS 6332-16UP |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2019-1784?
CVE-2019-1784 is a vulnerability in the CLI of Cisco NX-OS Software that allows an authenticated, local attacker to execute arbitrary commands with root privilege.
How severe is CVE-2019-1784?
CVE-2019-1784 has a severity rating of 6.7 (high).
Which software is affected by CVE-2019-1784?
Cisco NX-OS Software versions up to 7.3(5)n1(1) are affected by CVE-2019-1784.
How can I fix CVE-2019-1784?
To fix CVE-2019-1784, upgrade Cisco NX-OS Software to a version beyond 7.3(5)n1(1).
Where can I find more information about CVE-2019-1784?
More information about CVE-2019-1784 can be found at the following references: http://www.securityfocus.com/bid/108369, https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-cmd-inject-1784
- agent/references
- agent/type
- agent/title
- agent/weakness
- agent/severity
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco nx-os
- canonical/cisco nexus 5548p firmware
- canonical/cisco nexus 5548up firmware
- canonical/cisco nexus 5596t firmware
- canonical/cisco nexus 5596up firmware
- canonical/cisco 56128p
- canonical/cisco nexus 5624q firmware
- canonical/cisco nexus 5648q firmware
- canonical/cisco nexus 5672up-16g
- canonical/cisco nexus 5696q firmware
- canonical/cisco nexus 6001 firmware
- canonical/cisco nexus 6004 firmware
- version/cisco nx-os/7.2
- version/cisco nx-os/8.0
- version/cisco nx-os/8.3
- canonical/cisco 7000
- canonical/cisco 7700
- canonical/cisco ucs 6248up
- canonical/cisco ucs 6296up
- canonical/cisco ucs 6324 firmware
- canonical/cisco ucs 6332
- canonical/cisco ucs 6332-16up