Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2019-1776

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying Linux operating system with a privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.

  • Published: May 15, 2019
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-1776
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 6.7
  • AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs:

OWASP TOP 10:

Software From Fixed in
cisco / nx-os - 8.2\(2\)
cisco / nx-os 8.3 8.3\(1\)
cisco / nx-os - 7.0\(3\)i4\(9\)
cisco / nx-os 7.0\(3\)i7 7.3\(3\)i7\(4\)
cisco / nx-os - 6.0\(2\)a8\(11\)
cisco / nx-os 7.0\(3\)i4 7.0\(3\)i4\(9\)
cisco / nx-os 7.0\(3\) 7.0\(3\)f3\(5\)
cisco / nx-os - 7.3\(5\)n1\(1\)
cisco / nx-os - 7.3\(3\)d1\(1\)
cisco / nx-os 8.0 8.2\(2\)
cisco / nx-os - 4.0\(1a\)