CVE-2019-1618: high-severity vulnerability in Cisco Nexus 9000 Series Switches in Standalone…
Cisco Nexus 9000 Series Switches Standalone NX-OS Mode Tetration Analytics Agent Arbitrary Code Execution Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.8epss 0.4%
A vulnerability in the Tetration Analytics agent for Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to an incorrect permissions setting. An attacker could exploit this vulnerability by replacing valid agent files with malicious code. A successful exploit could result in the execution of code supplied by the attacker. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running versions prior to 7.0(3)I7(5).
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Cisco · Nexus 9000 Series Switches in Standalone NX-OS ModeRelated CVEs — Cisco Nexus 9000 Series Switches in Standalone…
In the same product, most dangerous first.
CVE-2019-1599HIGHCisco NX-OS Software Netstack Denial of Service VulnerabilityEPSS 14.3%CVE-2019-1614HIGHCisco NX-OS Software NX-API Command Injection VulnerabilityEPSS 4.1%CVE-2019-1598HIGHCisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service VulnerabilitiesEPSS 2.5%CVE-2019-1597HIGHCisco FXOS and NX-OS Lightweight Directory Access Protocol Denial of Service VulnerabilitiesEPSS 2.5%CVE-2019-1616HIGHCisco NX-OS Software Cisco Fabric Services Denial of Service VulnerabilityEPSS 2.4%CVE-2019-1617HIGHCisco Nexus 9000 Series Switches Standalone NX-OS Mode Fibre Channel over Ethernet NPV Denial of Service VulnerabilityEPSS 1.3%