« Volver al listado

CVE-2019-1767

Estado: ModificadaMedia (6.7)—

A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit this vulnerability by including malicious input as the argument of the affected CLI command.

Leer descripción completaMostrar menos

A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. An attacker would need valid administrator credentials to exploit these vulnerabilities. NX-OS versions prior to 8.3(1) are affected.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Cisco — Nx-os

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2019-1767",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2019-1767",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-11-20T16:55:00.651175Z"
        }
      }
    ],
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.2,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "psirt@cisco.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "Cisco",
          "product": "Cisco NX-OS Software",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "8.3(1)",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2019-05-15T19:29:00.697",
  "references": [
    {
      "url": "http://www.securityfocus.com/bid/108386",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-overflow-inj",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/108386",
      "tags": [
        "Third Party Advisory",
        "VDB Entry"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-overflow-inj",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@cisco.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-78"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability in the implementation of a specific CLI command for Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to cause a buffer overflow condition or perform command injection. This could allow the attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to a certain CLI command. An attacker could exploit this vulnerability by including malicious input as the argument of the affected CLI command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. An attacker would need valid administrator credentials to exploit these vulnerabilities. NX-OS versions prior to 8.3(1) are affected."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad en la implementación de un comando específico CLI  para el software Cisco NX-OS podría permitir que un atacante local autenticado con credenciales de administrador genere una condición de desbordamiento del búfer o realice una inyección de comandos. Esto podría permitir al atacante ejecutar comandos arbitrarios con elevados privilegios  sobre el sistema operativo subyacente de un dispositivo afectado. La vulnerabilidad se debe a una validación insuficiente de los argumentos pasados ??a un determinado comando CLI. Un atacante podría aprovechar esta vulnerabilidad al incluir una entrada maliciosa como el argumento del comando CLI afectado. Un aprovechamiento exitoso podría permitir al atacante ejecutar comandos arbitrarios en el sistema operativo subyacente con privilegios de raiz. Un atacante necesitaría credenciales de administrador válidas para aprovechar estas vulnerabilidades. Las versiones de NX-OS anteriores a 8.3 (1) están afectadas."
    }
  ],
  "lastModified": "2026-06-17T02:29:15.727",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D14AF388-8D72-45DF-A268-4ACE8472F65C",
              "versionEndExcluding": "8.3\\(1\\)"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3016:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "528ED62B-D739-4E06-AC64-B506FD73BBAB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FC2A6C31-438A-4CF5-A3F3-364B1672EB7D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3064:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "76C10D85-88AC-4A79-8866-BED88A0F8DF8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3064-t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "65CB7F6D-A82B-4A31-BFAC-FF4A4B8DF9C1"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_31108pc-v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4E930332-CDDD-48D5-93BC-C22D693BBFA2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_31108tc-v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7BF4B8FE-E134-4491-B5C2-C1CFEB64731B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_31128pq:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F4226DA0-9371-401C-8247-E6E636A116C3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132c-z:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7664666F-BCE4-4799-AEEA-3A73E6AD33F4"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D3DBBFE9-835C-4411-8492-6006E74BAC65"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132q-v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B3293438-3D18-45A2-B093-2C3F65783336"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3132q-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "8F43B770-D96C-44EA-BC12-9F39FC4317B9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3164q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FA782EB3-E8E6-4DCF-B39C-B3CBD46E4384"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7817F4E6-B2DA-4F06-95A4-AF329F594C02"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172pq-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7BB9DD73-E31D-4921-A6D6-E14E04703588"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172tq:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4532F513-0543-4960-9877-01F23CA7BA1B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172tq-32t:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0B43502B-FD53-465A-B60F-6A359C6ACD99"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3172tq-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F3229124-B097-4AAC-8ACD-2F9C89DCC3AB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3232c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "652A2849-668D-4156-88FB-C19844A59F33"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3264c-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "24FBE87B-8A4F-43A8-98A3-4A7D9C630937"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3264q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "6ACD09AC-8B28-4ACB-967B-AB3D450BC137"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3408-s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7D397349-CCC6-479B-9273-FB1FFF4F34F2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_34180yc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DC7286A7-780F-4A45-940A-4AD5C9D0F201"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3432d-s:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "5F7AF8D7-431B-43CE-840F-CC0817D159C0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3464c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DAC204C8-1A5A-4E85-824E-DC9B8F6A802D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3524:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EAF5AF71-15DF-4151-A1CF-E138A7103FC8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3524-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "10F80A72-AD54-4699-B8AE-82715F0B58E2"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3524-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "9354B6A2-D7D6-442E-BF4C-FE8A336D9E94"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "088C0323-683A-44F5-8D42-FF6EC85D080E"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3548-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "74CB4002-7636-4382-B33E-FBA060A13C34"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3548-xl:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "10CEBF73-3EE0-459A-86C5-F8F6243FE27C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_36180yc-r:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "95D2C4C3-65CE-4612-A027-AF70CEFC3233"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_3636c-r:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "57572E4A-78D5-4D1A-938B-F05F01759612"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9000v:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0CD9C1F1-8582-4F67-A77D-97CBFECB88B8"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92160yc-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4283E433-7F8C-4410-B565-471415445811"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92300yc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F80AB6FB-32FD-43D7-A9F1-80FA47696210"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92304qc:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D5B2E4C1-2627-4B9D-8E92-4B483F647651"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_92348gc-x:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "557ED31C-C26A-4FAE-8B14-D06B49F7F08B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9236c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "11411BFD-3F4D-4309-AB35-A3629A360FB0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9272q:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E663DE91-C86D-48DC-B771-FA72A8DF7A7C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A90184B3-C82F-4CE5-B2AD-97D5E4690871"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93108tc-fx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4AB89849-6DA4-4C9D-BC3F-EE0E41FD1901"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93120tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "07DE6F63-2C7D-415B-8C34-01EC05C062F3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93128tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F423E45D-A6DD-4305-9C6A-EAB26293E53A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180lc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E952A96A-0F48-4357-B7DD-1127D8827650"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-ex:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F70D81F1-8B12-4474-9060-B4934D8A3873"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93180yc-fx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7349D69B-D8FA-4462-AA28-69DD18A652D9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93216tc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B1CC5F78-E88B-4B82-9E3E-C73D3A49DE26"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93240yc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "91231DC6-2773-4238-8C14-A346F213B5E5"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9332c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2DF88547-BAF4-47B0-9F60-80A30297FCEB"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9332pq:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "113772B6-E9D2-4094-9468-3F4E1A87D07D"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_93360yc-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "C45A38D6-BED6-4FEF-AD87-A1E813695DE0"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9336c-fx2:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F1FC2B1F-232E-4754-8076-CC82F3648730"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9336pq_aci_spine:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "785FD17C-F32E-4042-9DDE-A89B3AAE0334"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9348gc-fxp:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "17C7E3DB-8E1A-47AD-B1C5-61747DC0CFB9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9364c:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "63842B25-8C32-4988-BBBD-61E9CB09B4F3"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372px:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "4364ADB9-8162-451D-806A-B98924E6B2CF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372px-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "B53BCB42-ED61-4FCF-8068-CB467631C63C"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "49E0371B-FDE2-473C-AA59-47E1269D050F"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9372tx-e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "489D11EC-5A18-4F32-BC7C-AC1FCEC27222"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9396px:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "1BC5293E-F2B4-46DC-85DA-167EA323FCFD"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9396tx:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "EA022E77-6557-4A33-9A3A-D028E2DB669A"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9504:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "768BE390-5ED5-48A7-9E80-C4DE8BA979B1"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9508:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DDC2F709-AFBE-48EA-A3A2-DA1134534FB6"
            },
            {
              "criteria": "cpe:2.3:h:cisco:nexus_9516:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "7E02DC82-0D26-436F-BA64-73C958932B0A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}