1. Home
  2. CVE Database
  3. CVE-2019-1783
MEDIUM · 6.7

CVE-2019-1783

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system wi...

Vulnerability Description

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system with the privilege level of root. The vulnerability is due to insufficient validation of arguments passed to a specific CLI command on the affected device. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying Linux operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability.

CVSS Score

6.7

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
CiscoNx-Os< 7.3\(4\)n1\(1\)
CiscoNexus 5548P-
CiscoNexus 5548Up-
CiscoNexus 5596T-
CiscoNexus 5596Up-
CiscoNexus 56128P-
CiscoNexus 5624Q-
CiscoNexus 5648Q-
CiscoNexus 5672Up-
CiscoNexus 5696Q-
CiscoNexus 6001-
CiscoNexus 6004-
CiscoNexus 7000-
CiscoNexus 7700-

Related Weaknesses (CWE)

CWE-88CWE-77

References

FAQ

What is CVE-2019-1783?

CVE-2019-1783 is a vulnerability with a CVSS score of 6.7 (MEDIUM). A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to execute arbitrary commands on the underlying Linux operating system wi...

How severe is CVE-2019-1783?

CVE-2019-1783 has been rated MEDIUM with a CVSS base score of 6.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-1783?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Nx-Os, Cisco Nexus 5548P, Cisco Nexus 5548Up, Cisco Nexus 5596T, Cisco Nexus 5596Up.