RCE in Cisco Nx-os Software For Nexus 9000 Series Fabric Switches Aci Mode 11.0.1b
CVE-2019-1804
A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges o…
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.035 (87.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Cisco Nx-os Software For Nexus 9000 Series Fabric Switches Aci Mode 11.0.1b — versions unspecified
- Cisco Nexus_93108tc-ex
- Cisco Nexus_93108tc-ex_firmware — versions 14.0\(3d\)
- Cisco Nexus_93120tx
- Cisco Nexus_93120tx_firmware — versions 14.0\(3d\)
- Cisco Nexus_93128tx
- Cisco Nexus_93128tx_firmware — versions 14.0\(3d\)
- Cisco Nexus_93180yc-ex
- Cisco Nexus_93180yc-ex_firmware — versions 14.0\(3d\)
- Cisco Nexus_9332pq
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2019-1804?
- CVE-2019-1804 is a critical-severity vulnerability in Cisco Nx-os Software For Nexus 9000 Series Fabric Switches Aci Mode 11.0.1b, classified under Cryptographic Issues. CVSS score: 9.8/10. Published 2019-05-03.
- How severe is CVE-2019-1804?
- Critical severity. CVSS v3 base score is 9.8 out of 10.