Vulnerability in Cisco Nx-os Software For Nexus 9000 Series Fabric Switches Aci Mode
CVE-2019-1803
A vulnerability in the filesystem management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an authenticated, local attacker with administrator rights to gain elevated privileges a…
EPSS: 0.003 (23.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Nx-os Software For Nexus 9000 Series Fabric Switches Aci Mode — versions unspecified
- Cisco Nexus_9000_series_application_centric_infrastructure
- Cisco Nexus_93108tc-ex
- Cisco Nexus_93120tx
- Cisco Nexus_93128tx
- Cisco Nexus_93180lc-ex
- Cisco Nexus_93180tc-ex
- Cisco Nexus_93180yc-ex
- Cisco Nexus_93180yc-fx
- Cisco Nexus_9332pq
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-1803?
- CVE-2019-1803 is a medium-severity vulnerability in Cisco Nx-os Software For Nexus 9000 Series Fabric Switches Aci Mode, classified under CWE-264. CVSS score: 6.7/10. Published 2019-05-03.
- How severe is CVE-2019-1803?
- Medium severity. CVSS v3 base score is 6.7 out of 10.