Medium severity · published May 3, 2019
CVE-2019-1803
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Root Privilege Escalation Vulnerability
6.7
CVSS
0.3%
EPSS
No
On KEV
Description
A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges as the root user on an affected device. The vulnerability is due to overly permissive file permissions of specific system files. An attacker could exploit this vulnerability by authenticating to an affected device, creating a crafted command string, and writing this crafted string to a specific file location. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device. The attacker would need to have valid administrator credentials for the device.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 25% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CN
Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode · Cisco
before 14.1(1i) · source: vendor
N9
Nexus 9000 Series Application Centric Infrastructure · Cisco
All versions, or not specified · source: NVD
Affected product
CN
Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-1803
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-1803
Vendor Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-rpe
More from Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode
8.1
CVE-2019-1590
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability
7.8
CVE-2019-1591
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Shell Escape Vulnerability
7.8
CVE-2019-1585
Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability
7.1
CVE-2019-1836
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal Vulnerability
4.6
CVE-2019-1589
Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Unmeasured Boot Vulnerability
