What is CVE-2019-1735?

CVE-2019-1735 is a high-severity vulnerability in Cisco Nx-os Software, classified under Command Injection. CVSS score: 7.8/10. Published 2019-05-15.

How severe is CVE-2019-1735?

High severity. CVSS v3 base score is 7.8 out of 10.

RCE in Cisco Nx-os Software

CVE-2019-1735

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to in…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.005 (41.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco Nx-os Software — versions unspecified
Cisco Mds_9000
Cisco Mds_9100
Cisco Mds_9200
Cisco Mds_9500
Cisco Mds_9700
Cisco Nexus_1000v
Cisco Nexus_1000ve
Cisco Nexus_3016
Cisco Nexus_3048

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2019-1735?: CVE-2019-1735 is a high-severity vulnerability in Cisco Nx-os Software, classified under Command Injection. CVSS score: 7.8/10. Published 2019-05-15.
How severe is CVE-2019-1735?: High severity. CVSS v3 base score is 7.8 out of 10.