6.9

CVE-2019-1732

Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability

A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use (TOCTOU) race condition to corrupt local variables, which could lead to arbitrary command injection. The vulnerability is due to the lack of a proper locking mechanism on critical variables that need to stay static until used. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a set of RPM-related CLI commands. A successful exploit could allow the attacker to perform arbitrary command injection. The attacker would need administrator credentials for the targeted device.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Nx-os Version >= 7.0\(3\)i4 < 7.0\(3\)i7\(4\)
   Cisco ≫ Nexus 3000 Version -
   Cisco ≫ Nexus 3100 Version -
   Cisco ≫ Nexus 3100-z Version -
   Cisco ≫ Nexus 3100v Version -
   Cisco ≫ Nexus 3200 Version -
   Cisco ≫ Nexus 3400 Version -
   Cisco ≫ Nexus 3500 Version -
   Cisco ≫ Nexus 3524-x Version -
   Cisco ≫ Nexus 3524-xl Version -
   Cisco ≫ Nexus 3548-x Version -
   Cisco ≫ Nexus 3548-xl Version -
   Cisco ≫ Nexus 9000 Version -
   Cisco ≫ Nexus 9200 Version -
   Cisco ≫ Nexus 9300 Version -
   Cisco ≫ Nexus 9500 Version -
Cisco ≫ Nx Os Version >= 7.0\(3\) < 7.0\(3\)f3\(5\)
   Cisco ≫ Nexus 3600 Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.274
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.4 0.5 5.9
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
NIST 6.9 3.4 10
AV:L/AC:M/Au:N/C:C/I:C/A:C
Cisco PSIRT 6.4 0.5 5.9
CVSS:3.0/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CWE-667 Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.

http://www.securityfocus.com/bid/108361
Third Party Advisory
VDB Entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-nxos-rpm-injec
Vendor Advisory