5.5 Medium

CVE-2019-1836 A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure…

Description

A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to use symbolic links to overwrite system files. These system files may be sensitive and should not be overwritable by non-root users. The attacker would need valid device credentials. The vulnerability is due to incorrect symbolic link verification of directory paths when they are used in the system shell. An attacker could exploit this vulnerability by authenticating to the device and providing crafted user input to specific symbolic link CLI commands. Successful exploitation could allow the attacker to overwrite system files that should be restricted. This vulnerability has been fixed in software version 14.1(1i).

Affected products and versions

Product	Affected versions	Fixed in
Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode	Versions not published

References

20190501 Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Symbolic Link Path Traversal Vulnerability tools.cisco.com
108150 www.securityfocus.com

Timeline

Published May 3, 2019
Last modified November 21, 2024

The 7 CVEs of Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI Mode →

CVE-2019-1803 A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI)… 7.8 High CVE-2019-1589 A vulnerability in the Trusted Platform Module (TPM) functionality of software for Cisco Nexus 9000 Series Fabric… 4.2 Medium CVE-2019-1590 A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series… 8.1 High CVE-2019-1591 A vulnerability in a specific CLI command implementation of Cisco Nexus 9000 Series ACI Mode Switch Software could allow… 7.8 High

Track this CVE