PT-2019-2039 · Cisco · Cisco Nexus 9000 Series

Oliver Matula · Publicado 2019-05-01 · Atualizado 2021-11-03 · CVE-2019-1804

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software (affected versions not specified)

Description The issue is related to errors in SSH key management, allowing a remote attacker to connect to the system with root privileges via IPv6. This is due to the presence of a default SSH key pair in all devices. An attacker could exploit this by opening an SSH connection via IPv6 using the extracted key materials, gaining access to the system with root privileges. The vulnerability is only exploitable over IPv6.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-310

CWE-1188

Identificadores relacionados

BDU:2019-01784

CVE-2019-1804

Produtos afetados

Cisco Nexus 9000 Series

Referências · 5

• https://t.me/cybersecuritytechnologies/236 · Publicação no Telegram
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-sshkey · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01784 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1804 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-1804 · Nota de Segurança