cisco-sa-20180620-nxosadmin: Cisco FXOS and NX-OS Software Unauthorized Administrator Account Vulnerability
First published: Wed Jun 20 2018(Updated: )
A vulnerability in the write-erase feature of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to configure an unauthorized administrator account for an affected device. The vulnerability exists because the affected software does not properly delete sensitive files when certain CLI commands are used to clear the device configuration and reload a device. An attacker could exploit this vulnerability by logging into an affected device as an administrative user and configuring an unauthorized account for the device. The account would not require a password for authentication and would be accessible only via a Secure Shell (SSH) connection to the device. A successful exploit could allow the attacker to configure an unauthorized account that has administrative privileges, does not require a password for authentication, and does not appear in the running configuration or the audit logs for the affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20180620-nxosadmin This advisory is part of the June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection, which includes 24 Cisco Security Advisories that describe 24 vulnerabilities. For a complete list of the advisories and links to them, see Cisco Event Response: June 2018 Cisco FXOS and NX-OS Software Security Advisory Collection.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco FXOS Software | =2.2.2<2.2.2.17=2.2<2.2.2.17=2.1.1<2.1.1.86=2.0<2.0.1.159=1.1<2.0.1.159 | 2.2.2.17 2.2.2.17 2.1.1.86 2.0.1.159 2.0.1.159 |
| Cisco NX-OS Software | ||
| Cisco NX-OS Software | =4.1<4.1(2)E1(1r) | 4.1(2)E1(1r) |
| Cisco NX-OS Software | =3.2<3.2(1d)=3.1<3.1(3a)=3.0<3.1(3a)=2.5<3.1(3a)=2.2<3.1(3a)1=Prior to 2.2<3.1(3a)1 | 3.2(1d) 3.1(3a) 3.1(3a) 3.1(3a) 3.1(3a)1 3.1(3a)1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability called?
The vulnerability is called Cisco FXOS and NX-OS Software Unauthorized Administrator Account Vulnerability.
What is the severity level of this vulnerability?
The severity level of this vulnerability is medium.
How does the vulnerability occur?
The vulnerability occurs due to an issue with the write-erase feature in Cisco FXOS Software and Cisco NX-OS Software.
What can an attacker do with this vulnerability?
An authenticated, local attacker can configure an unauthorized administrator account for the affected device.
How can I fix this vulnerability?
Cisco has released software updates to address this vulnerability. Please refer to the Cisco Security Advisory for more details.
- agent/type
- agent/softwarecombine
- agent/last-modified-date
- collector/cisco-advisory
- source/Cisco
- agent/software-canonical-lookup
- agent/title
- agent/references
- agent/severity
- agent/weakness
- agent/description
- agent/tags
- agent/first-publish-date
- agent/event
- vendor/cisco
- canonical/cisco fxos software
- version/cisco fxos software/2.2.2
- version/cisco fxos software/2.2
- version/cisco fxos software/2.1.1
- version/cisco fxos software/2.0
- version/cisco fxos software/1.1
- canonical/cisco nx-os software
- version/cisco nx-os software/4.1
- version/cisco nx-os software/3.2
- version/cisco nx-os software/3.1
- version/cisco nx-os software/3.0
- version/cisco nx-os software/2.5
- version/cisco nx-os software/2.2
- version/cisco nx-os software/prior to 2.2