cisco-sa-20190306-aci-controller-privsec

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability

view advisory published 2019-03-06

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers files for the bashroot component on an affected device. An attacker could exploit this vulnerability by authenticating to the affected device with a crafted user ID, which may allow temporary administrative access to escalate privileges. A successful exploit could allow the attacker to escalate privileges on an affected device. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-controller-privsec ["https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-controller-privsec"]

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2019-1585US	high7.8	0.39% (33rd)	—	2019-03-06
A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard…

references

External citations — patches, advisories, analysis.

Cisco Nexus 1000V for VMware Switchexternal
Cisco Nexus 3000 Series and 3500 Series Switchesexternal
Cisco Nexus 5000 Series Switchesexternal
Cisco Nexus 5500 Platform Switchesexternal
Cisco Nexus 6000 Series Switchesexternal
Cisco Nexus 9000 Series Switchesexternal
Cisco Nexus 7000 Series Switchesexternal
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-controller-privsecexternal

remediations (91)

No fix available11.0(1b)
No remediation is available at this time.
No fix available11.0(1c)
No remediation is available at this time.
No fix available11.0(1d)
No remediation is available at this time.
No fix available11.0(1e)
No remediation is available at this time.
No fix available11.0(2j)
No remediation is available at this time.
No fix available11.0(2m)
No remediation is available at this time.
No fix available11.0(3f)
No remediation is available at this time.
No fix available11.0(3i)
No remediation is available at this time.
No fix available11.0(3k)
No remediation is available at this time.
No fix available11.0(3n)
No remediation is available at this time.
No fix available11.0(3o)
No remediation is available at this time.
No fix available11.0(4h)
No remediation is available at this time.
No fix available11.0(4o)
No remediation is available at this time.
No fix available11.0(4q)
No remediation is available at this time.
No fix available11.1(1j)
No remediation is available at this time.
No fix available11.1(1o)
No remediation is available at this time.
No fix available11.1(1r)
No remediation is available at this time.
No fix available11.1(1s)
No remediation is available at this time.
No fix available11.1(2h)
No remediation is available at this time.
No fix available11.1(2i)
No remediation is available at this time.
No fix available11.1(3f)
No remediation is available at this time.
No fix available11.1(4e)
No remediation is available at this time.
No fix available11.2(1i)
No remediation is available at this time.
No fix available11.2(2g)
No remediation is available at this time.
No fix available11.2(2h)
No remediation is available at this time.
No fix available11.2(2i)
No remediation is available at this time.
No fix available11.2(3c)
No remediation is available at this time.
No fix available11.2(3e)
No remediation is available at this time.
No fix available11.2(3h)
No remediation is available at this time.
No fix available11.2(3m)
No remediation is available at this time.
No fix available11.3(1g)
No remediation is available at this time.
No fix available11.3(1h)
No remediation is available at this time.
No fix available11.3(1i)
No remediation is available at this time.
No fix available11.3(2f)
No remediation is available at this time.
No fix available11.3(2h)
No remediation is available at this time.
No fix available11.3(2i)
No remediation is available at this time.
No fix available11.3(2k)
No remediation is available at this time.
No fix available12.0(1m)
No remediation is available at this time.
No fix available12.0(1n)
No remediation is available at this time.
No fix available12.0(1o)
No remediation is available at this time.
No fix available12.0(1p)
No remediation is available at this time.
No fix available12.0(1q)
No remediation is available at this time.
No fix available12.0(2f)
No remediation is available at this time.
No fix available12.0(2g)
No remediation is available at this time.
No fix available12.0(2h)
No remediation is available at this time.
No fix available12.0(2l)
No remediation is available at this time.
No fix available12.0(2m)
No remediation is available at this time.
No fix available12.0(2n)
No remediation is available at this time.
No fix available12.0(2o)
No remediation is available at this time.
No fix available12.1(1h)
No remediation is available at this time.
No fix available12.1(1i)
No remediation is available at this time.
No fix available12.1(2e)
No remediation is available at this time.
No fix available12.1(2g)
No remediation is available at this time.
No fix available12.1(2k)
No remediation is available at this time.
No fix available12.1(3g)
No remediation is available at this time.
No fix available12.1(3h)
No remediation is available at this time.
No fix available12.1(3j)
No remediation is available at this time.
No fix available12.1(4a)
No remediation is available at this time.
No fix available12.2(1n)
No remediation is available at this time.
No fix available12.2(1o)
No remediation is available at this time.
No fix available12.2(2e)
No remediation is available at this time.
No fix available12.2(2f)
No remediation is available at this time.
No fix available12.2(2g)
No remediation is available at this time.
No fix available12.2(2i)
No remediation is available at this time.
No fix available12.2(2j)
No remediation is available at this time.
No fix available12.2(2k)
No remediation is available at this time.
No fix available12.2(2q)
No remediation is available at this time.
No fix available12.2(3j)
No remediation is available at this time.
No fix available12.2(3p)
No remediation is available at this time.
No fix available12.2(3r)
No remediation is available at this time.
No fix available12.2(3s)
No remediation is available at this time.
No fix available12.2(3t)
No remediation is available at this time.
No fix available12.2(4f)
No remediation is available at this time.
No fix available12.2(4p)
No remediation is available at this time.
No fix available12.3(1e)
No remediation is available at this time.
No fix available12.3(1f)
No remediation is available at this time.
No fix available12.3(1i)
No remediation is available at this time.
No fix available12.3(1l)
No remediation is available at this time.
No fix available12.3(1o)
No remediation is available at this time.
No fix available12.3(1p)
No remediation is available at this time.
No fix available13.0(1k)
No remediation is available at this time.
No fix available13.0(2h)
No remediation is available at this time.
No fix available13.0(2k)
No remediation is available at this time.
No fix available13.0(2n)
No remediation is available at this time.
No fix available13.1(1i)
No remediation is available at this time.
No fix available13.1(2m)
No remediation is available at this time.
No fix available13.1(2o)
No remediation is available at this time.
No fix available13.1(2p)
No remediation is available at this time.
No fix available13.1(2q)
No remediation is available at this time.
No fix available13.2(1l)
No remediation is available at this time.
No fix available13.2(1m)
No remediation is available at this time.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan