PT-2019-1553 · Cisco · Nexus 3600 Platform Switches+16

Published

2019-03-06

·

Updated

2020-10-05

·

CVE-2019-1611

CVSS v2.0

7.2

High

VectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222 Cisco FXOS Software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222 Firepower 4100 Series Next-Generation Firewalls versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222 Firepower 9300 Security Appliance versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222 MDS 9000 Series Multilayer Switches versions prior to 6.2(25) and 8.3(1) Nexus 3000 Series Switches versions prior to 7.0(3)I4(9) and 7.0(3)I7(5) Nexus 3500 Platform Switches versions prior to 7.0(3)I7(5) Nexus 3600 Platform Switches versions prior to 7.0(3)F3(5) Nexus 2000, 5500, 5600, and 6000 Series Switches versions prior to 7.1(5)N1(1b) and 7.3(4)N1(1) Nexus 7000 and 7700 Series Switches versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3) Nexus 9000 Series Switches in Standalone NX-OS Mode versions prior to 7.0(3)I4(9) and 7.0(3)I7(5) Nexus 9500 R-Series Line Cards and Fabric Modules versions prior to 7.0(3)F3(5)
Description A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.
Recommendations For Cisco NX-OS Software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222, update to the latest software version. For Cisco FXOS Software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222, update to the latest software version. For Firepower 4100 Series Next-Generation Firewalls versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222, update to the latest software version. For Firepower 9300 Security Appliance versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222, update to the latest software version. For MDS 9000 Series Multilayer Switches versions prior to 6.2(25) and 8.3(1), update to the latest software version. For Nexus 3000 Series Switches versions prior to 7.0(3)I4(9) and 7.0(3)I7(5), update to the latest software version. For Nexus 3500 Platform Switches versions prior to 7.0(3)I7(5), update to the latest software version. For Nexus 3600 Platform Switches versions prior to 7.0(3)F3(5), update to the latest software version. For Nexus 2000, 5500, 5600, and 6000 Series Switches versions prior to 7.1(5)N1(1b) and 7.3(4)N1(1), update to the latest software version. For Nexus 7000 and 7700 Series Switches versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3), update to the latest software version. For Nexus 9000 Series Switches in Standalone NX-OS Mode versions prior to 7.0(3)I4(9) and 7.0(3)I7(5), update to the latest software version. For Nexus 9500 R-Series Line Cards and Fabric Modules versions prior to 7.0(3)F3(5), update to the latest software version.

Fix

Command Injection

Argument Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-77CWE-88

Related Identifiers

BDU:2019-01083
CVE-2019-1611

Affected Products

Cisco Fxos
Cisco Nx-Os
Cisco Nexus
Firepower 4100 Series Next-Generation Firewalls
Firepower 9300 Security Appliance
Mds 9000 Series Multilayer Switches
Nexus 2000 Series Switches
Nexus 3000 Series Switches
Nexus 3500 Platform Switches
Nexus 3600 Platform Switches
Nexus 5500 Series Switches
Nexus 5600 Series Switches
Nexus 6000 Series Switches
Nexus 7000 Series Switches
Nexus 7700 Series Switches
Nexus 9000 Series Switches
Nexus 9500 R-Series Line Cards/Fabric Modules