CVE-2019-1612

Estado: ModificadaMedia (6.7)—

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges.

Leer descripción completaMostrar menos

An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected running software versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Stand are affected running software versions prior to 7.0(3)F3(5).

CVSS

Versión: 3.0
Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Puntuación base: 6.7

Probabilidad de explotación (EPSS)

Probabilidad de explotación en los próximos 30 días: 0.46%
Percentil entre todas las CVEs puntuadas: 38
Fecha de la puntuación: 7/10/2026

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

ExplotaciónT1078 Valid Accountsstealth · persistence · privilege escalation · initial access
ExplotaciónT1133 External Remote Servicespersistence · initial access
Impacto principalT1059 Command and Scripting Interpreterexecution
Impacto secundarioT1068 Exploitation for Privilege Escalationprivilege escalation

Fuente: mapeo oficial MITRE CTID (CVE → ATT&CK).

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Restrict Web-Based Content Privileged Account Management Multi-factor Authentication Execution Prevention Disable or Remove Feature or Program Application Developer Guidance

Tecnologías afectadas (1)

Cisco — Nx-os

CWE

CWE-77
CWE-78

Referencias

JSON original (NVD)

Mostrar

{
  "id": "CVE-2019-1612",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-1612",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-21T19:00:06.696498Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 4.2,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "LOW",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 3.4,
        "exploitabilityScore": 0.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Nexus 3000 Series Switches",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.0(3)I4(9)",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.0(3)I7(4)",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Cisco",
          "product": "Nexus 3500 Platform Switches",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.0(3)I7(4)",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Cisco",
          "product": "Nexus 3600 Platform Switches",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.0(3)F3(5)",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Cisco",
          "product": "Nexus 9000 Series Switches in Standalone NX-OS Mode",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.0(3)I4(9)",
              "versionType": "custom"
            },
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.0(3)I7(4)",
              "versionType": "custom"
            }
          ]
        },
        {
          "vendor": "Cisco",
          "product": "Nexus 9500 R-Series Line Cards and Fabric Modules",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "7.0(3)F3(5)",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-03-11T21:29:00.793",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/107388",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1612",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/107388",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1612",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-77"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected running software versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Stand are affected running software versions prior to 7.0(3)F3(5)."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la CLI del software NX-OS de Cisco podría permitir a un atacante local autenticado ejecutar comandos arbitrarios en el sistema operativo subyacente de un dispositivo afectado. La vulnerabilidad se debe a una validación de argumentos insuficiente que se envían a determinados comandos CLI. Un atacante podría explotar esta vulnerabilidad incluyendo entradas maliciosas como el argumento de un comando afectado. Un exploit con éxito podría permitir al atacante ejecutar comandos arbitrarios en el sistema operativo subyacente con privilegios elevados. Un atacante necesitaría credenciales de administrador válidas para explotar esta vulnerabilidad. Los switches de Nexus 3000 Series se ven afectados en versiones de software anteriores a las 7.0(3)I4(9) y 7.0(3)I7(4). Los switches de Nexus 3500 Platform se ven afectados en versiones de software anteriores a la 7.0(3)I7(4). Los switches de Nexus 3600 Platform se ven afectados en versiones de software anteriores a la 7.0(3)F3(5). Los switches de Nexus 9000 Series en Stand se ven afectados en versiones de software anteriores a la 7.0(3)F3(5)."
    }
  ],
  "lastModified": "2026-06-17T02:28:52.147",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ED42A087-971B-4452-BCE0-A237176B5067",
              "versionEndExcluding": "7.0\\(3\\)i7\\(6\\)",
              "versionStartIncluding": "7.0\\(3\\)"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A8E1073F-D374-4311-8F12-AD8C72FAA293"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8C322689-0DC6-412F-B82F-F64F0B5D68DA",
              "versionEndExcluding": "7.0\\(3\\)i7\\(6\\)",
              "versionStartIncluding": "7.0\\(3\\)i5"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "10FFC5E8-CC5A-4D31-A63A-19E72EC442AB"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AB649123-3091-4A8E-A992-42E7BAE299ED",
              "versionEndExcluding": "7.0\\(3\\)f3\\(5\\)",
              "versionStartIncluding": "7.0\\(3\\)f3"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3600:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "97217080-455C-48E4-8CE1-6D5B9485864F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CAB74D2E-06DD-4899-9262-64AAC104A992",
              "versionEndExcluding": "7.0\\(3\\)f3\\(5\\)"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8EBEBA5B-5589-417B-BF3B-976083E9FE54"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C856C77-493C-4543-8958-A9AEBBDCBBDD",
              "versionEndExcluding": "7.0\\(3\\)f3\\(5\\)",
              "versionStartIncluding": "7.0\\(3\\)f1"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9500:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "63BE0266-1C00-4D6A-AD96-7F82532ABAA7"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}