RCE in Cisco Firepower_4100
CVE-2019-1611
A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to ins…
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.005 (37.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Firepower_4100
- Cisco Firepower 4100 Series Next-generation Firewalls — versions unspecified, unspecified, unspecified
- Cisco Firepower_9300
- Cisco Firepower 9300 Security Appliance — versions unspecified, unspecified, unspecified
- Cisco Fx-os
- Cisco Mds_9000
- Cisco Mds 9000 Series Multilayer Switches — versions unspecified, unspecified
- Cisco Nexus_2000
- Cisco Nexus 2000, 5500, 5600, And 6000 Series Switches — versions unspecified, unspecified
- Cisco Nexus_3000
Weakness classification (CWE)
References
- psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-1611?
- CVE-2019-1611 is a medium-severity vulnerability in Cisco Firepower_4100, classified under Command Injection. CVSS score: 6.7/10. Published 2019-03-11.
- How severe is CVE-2019-1611?
- Medium severity. CVSS v3 base score is 6.7 out of 10.