Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-1732

A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use (TOCTOU) race condition to corrupt local variables, which could lead to arbitrary command injection. The vulnerability is due to the lack of a proper locking mechanism on critical variables that need to stay static until used. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a set of RPM-related CLI commands. A successful exploit could allow the attacker to perform arbitrary command injection. The attacker would need administrator credentials for the targeted device.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 39.4%
CVSS Severity
CVSS v3 Score 6.4
CVSS v2 Score 6.9
Products affected by CVE-2019-1732
  • Cisco » Nexus 3000 » Version: N/A
    cpe:2.3:h:cisco:nexus_3000:-
  • Cisco » Nexus 3100-Z » Version: N/A
    cpe:2.3:h:cisco:nexus_3100-z:-
  • Cisco » Nexus 3100 » Version: N/A
    cpe:2.3:h:cisco:nexus_3100:-
  • Cisco » Nexus 3100v » Version: N/A
    cpe:2.3:h:cisco:nexus_3100v:-
  • Cisco » Nexus 3200 » Version: N/A
    cpe:2.3:h:cisco:nexus_3200:-
  • Cisco » Nexus 3400 » Version: N/A
    cpe:2.3:h:cisco:nexus_3400:-
  • Cisco » Nexus 3500 » Version: N/A
    cpe:2.3:h:cisco:nexus_3500:-
  • Cisco » Nexus 3524-X » Version: N/A
    cpe:2.3:h:cisco:nexus_3524-x:-
  • Cisco » Nexus 3524-Xl » Version: N/A
    cpe:2.3:h:cisco:nexus_3524-xl:-
  • Cisco » Nexus 3548-X » Version: N/A
    cpe:2.3:h:cisco:nexus_3548-x:-
  • Cisco » Nexus 3548-Xl » Version: N/A
    cpe:2.3:h:cisco:nexus_3548-xl:-
  • Cisco » Nexus 3600 » Version: N/A
    cpe:2.3:h:cisco:nexus_3600:-
  • Cisco » Nexus 9000 » Version: N/A
    cpe:2.3:h:cisco:nexus_9000:-
  • Cisco » Nexus 9200 » Version: N/A
    cpe:2.3:h:cisco:nexus_9200:-
  • Cisco » Nexus 9300 » Version: N/A
    cpe:2.3:h:cisco:nexus_9300:-
  • Cisco » Nexus 9500 » Version: N/A
    cpe:2.3:h:cisco:nexus_9500:-
  • Cisco » Nx-Os » Version: 7.0(3)i4
    cpe:2.3:o:cisco:nx-os:7.0(3)i4
  • Cisco » Nx-Os » Version: 7.0(3)i4(0.116)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(0.116)
  • Cisco » Nx-Os » Version: 7.0(3)i4(1)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(1)
  • Cisco » Nx-Os » Version: 7.0(3)i4(1t)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(1t)
  • Cisco » Nx-Os » Version: 7.0(3)i4(2)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(2)
  • Cisco » Nx-Os » Version: 7.0(3)i4(2)(md)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(2)(md)
  • Cisco » Nx-Os » Version: 7.0(3)i4(3)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(3)
  • Cisco » Nx-Os » Version: 7.0(3)i4(4)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(4)
  • Cisco » Nx-Os » Version: 7.0(3)i4(5)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(5)
  • Cisco » Nx-Os » Version: 7.0(3)i4(6)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(6)
  • Cisco » Nx-Os » Version: 7.0(3)i4(6t)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(6t)
  • Cisco » Nx-Os » Version: 7.0(3)i4(7)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(7)
  • Cisco » Nx-Os » Version: 7.0(3)i4(8)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(8)
  • Cisco » Nx-Os » Version: 7.0(3)i4(8a)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(8a)
  • Cisco » Nx-Os » Version: 7.0(3)i4(8b)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(8b)
  • Cisco » Nx-Os » Version: 7.0(3)i4(8z)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(8z)
  • Cisco » Nx-Os » Version: 7.0(3)i4(9)
    cpe:2.3:o:cisco:nx-os:7.0(3)i4(9)
  • Cisco » Nx-Os » Version: 7.0(3)i5
    cpe:2.3:o:cisco:nx-os:7.0(3)i5
  • Cisco » Nx-Os » Version: 7.0(3)i5(1)
    cpe:2.3:o:cisco:nx-os:7.0(3)i5(1)
  • Cisco » Nx-Os » Version: 7.0(3)i5(2)
    cpe:2.3:o:cisco:nx-os:7.0(3)i5(2)
  • Cisco » Nx-Os » Version: 7.0(3)i5(3)
    cpe:2.3:o:cisco:nx-os:7.0(3)i5(3)
  • Cisco » Nx-Os » Version: 7.0(3)i5(3a)
    cpe:2.3:o:cisco:nx-os:7.0(3)i5(3a)
  • Cisco » Nx-Os » Version: 7.0(3)i5(3b)
    cpe:2.3:o:cisco:nx-os:7.0(3)i5(3b)
  • Cisco » Nx-Os » Version: 7.0(3)i6(1)
    cpe:2.3:o:cisco:nx-os:7.0(3)i6(1)
  • Cisco » Nx-Os » Version: 7.0(3)i6(2)
    cpe:2.3:o:cisco:nx-os:7.0(3)i6(2)
  • Cisco » Nx-Os » Version: 7.0(3)i7
    cpe:2.3:o:cisco:nx-os:7.0(3)i7
  • Cisco » Nx-Os » Version: 7.0(3)i7(1)
    cpe:2.3:o:cisco:nx-os:7.0(3)i7(1)
  • Cisco » Nx-Os » Version: 7.0(3)i7(2)
    cpe:2.3:o:cisco:nx-os:7.0(3)i7(2)
  • Cisco » Nx-Os » Version: 7.0(3)i7(3)
    cpe:2.3:o:cisco:nx-os:7.0(3)i7(3)
  • Cisco » Nx-Os » Version: 7.0(3)i7(3z)
    cpe:2.3:o:cisco:nx-os:7.0(3)i7(3z)
  • Cisco » Nx Os » Version: Any
    cpe:2.3:o:cisco:nx_os:*


Products
Pricing
Contact Us

Shodan ® - All rights reserved