CVE-2019-1812: Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities

Q: What is the severity of CVE-2019-1812?

The severity of CVE-2019-1812 is classified as high due to its potential impact allowing an attacker to install malicious software images.

Q: How do I fix CVE-2019-1812?

To fix CVE-2019-1812, upgrade to a fixed software version as recommended in the Cisco security advisory.

Q: What causes CVE-2019-1812 vulnerability?

CVE-2019-1812 is caused by improper image signature verification in Cisco NX-OS software.

Q: Who is affected by CVE-2019-1812?

CVE-2019-1812 affects devices running vulnerable versions of Cisco NX-OS software.

Q: Can CVE-2019-1812 be exploited remotely?

CVE-2019-1812 requires local, authenticated access with administrator-level credentials for exploitation.

Published May 15, 2019

Updated

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an unsigned software image on an affected device.

Affected Software

69 affected components

Cisco NX-OS>=6.0\(2\)<7.0\(3\)i7\(5\)

Cisco NX-OS>=9.2<9.2\(2\)

Cisco Nexus 3048

Cisco Nexus 31108pc-v

Cisco Nexus 31108tc-v

Cisco Nexus 31128pq

Cisco Nexus 3132c-z

Cisco Nexus 3132q-v

Cisco Nexus 3132q-x\/3132q-xl

Cisco Nexus 3164q

Cisco Nexus 3172pq\/pq-xl

Cisco Nexus 3172tq-xl

Cisco Nexus 3232c

Cisco Nexus 3264c-e

Cisco Nexus 3264q

Cisco Nexus 3408-s

Cisco Nexus 34180yc

Cisco Nexus 3432d-s

Cisco Nexus 3464c

Cisco Nexus 3524-x\/xl

Cisco Nexus 3548-x\/xl

Cisco Nexus 36180yc-r

Cisco Nexus 3636c-r

Cisco NX-OS>=7.0\(3\)<7.0\(3\)f3\(5\)

Cisco N9k-c9504-fm-r

Cisco N9k-c9508-fm-r

Cisco NX-OS<7.0\(3\)i7\(5\)

Cisco 9432pq

Cisco 9536pq

Cisco 9636pq

Cisco 9736pq

Cisco N9k-x9432c-s

Cisco N9k-x9464px

Cisco N9k-x9464tx2

Cisco N9k-x9564px

Cisco N9k-x9564tx

Cisco N9k-x9636c-r

Cisco N9k-x9636c-rx

Cisco N9k-x97160yc-ex

Cisco N9k-x9732c-ex

Cisco N9k-x9732c-fx

Cisco N9k-x9736c-ex

Cisco N9k-x9736c-fx

Cisco N9k-x9788tc-fx

Cisco Nexus 92160yc-x

Cisco Nexus 92300yc

Cisco Nexus 93108tc-ex

Cisco Nexus 93108tc-fx

Cisco Nexus 93120tx

Cisco Nexus 9316d-gx

Cisco Nexus 93180lc-ex

Cisco Nexus 93180yc-ex

Cisco Nexus 93180yc-fx

Cisco Nexus 93216tc-fx2

Cisco Nexus 93240yc-fx2

Cisco Nexus 9332c

Cisco Nexus 93360yc-fx2

Cisco Nexus 9336c-fx2

Cisco Nexus 9348gc-fxp

Cisco Nexus 93600cd-gx

Cisco Nexus 9364c

Cisco Nexus 9500 Supervisor A

Cisco Nexus 9500 Supervisor A\+

Cisco Nexus 9500 Supervisor B

Cisco Nexus 9500 Supervisor B\+

Cisco Nexus 9504

Cisco Nexus 9508

Cisco Nexus 9516

Cisco X9636q-r

Event History

May 15, 2019

CVE Published

via MITRE·10:20 PM

Data Sourced

via MITRE·10:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2019-1812?

The severity of CVE-2019-1812 is classified as high due to its potential impact allowing an attacker to install malicious software images.

How do I fix CVE-2019-1812?

To fix CVE-2019-1812, upgrade to a fixed software version as recommended in the Cisco security advisory.

What causes CVE-2019-1812 vulnerability?

CVE-2019-1812 is caused by improper image signature verification in Cisco NX-OS software.

Who is affected by CVE-2019-1812?

CVE-2019-1812 affects devices running vulnerable versions of Cisco NX-OS software.

Can CVE-2019-1812 be exploited remotely?