PT-2019-2039 · Cisco · Cisco Nexus 9000 Series

Oliver Matula · Published 2019-05-01 · Updated 2021-11-03 · CVE-2019-1804

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software (affected versions not specified)

Description The issue is related to errors in SSH key management, allowing a remote attacker to connect to the system with root privileges via IPv6. This is due to the presence of a default SSH key pair in all devices. An attacker could exploit this by opening an SSH connection via IPv6 using the extracted key materials, gaining access to the system with root privileges. The vulnerability is only exploitable over IPv6.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

CWE-1188

Related Identifiers

BDU:2019-01784

CVE-2019-1804

Affected Products

Cisco Nexus 9000 Series

References · 5

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-sshkey · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01784 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1804 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-1804 · Security Note
• https://t.me/cybersecuritytechnologies/236 · Telegram Post