CVE-2019-1602 Cisco NX-OS Software Privilege Escalation Vulnerability
An authenticated local attacker can read sensitive files to gain administrator privileges on Cisco Nexus switches if NX-API is enabled.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-1602?
CVE-2019-1602 is a high-severity vulnerability in Cisco Nx-Os, published on 8 Mar 2019. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker could exploit this vulnerability by logging in to the CLI of an affected device, accessing a specific file, and leveraging this information to authenticate to the NX-API server. A successful exploit could allow an attacker to make configuration changes as administrator. Note: NX-API is disabled by default. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Weakness: CWE-264
Which versions are affected by CVE-2019-1602?
It affects 1 product.
Products include Cisco Nx-Os.
How do I fix CVE-2019-1602?
No fix has been published for CVE-2019-1602 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-1602 being exploited?
There is no known exploitation of CVE-2019-1602 in the wild and no public exploit code.
Other vulnerabilities in Cisco Nx-Os
Sources
Also known as GHSA-4wp2-63h4-86r7.