What is CVE-2019-1809?

CVE-2019-1809 is a medium-severity vulnerability in Cisco 7000 10-Slot, classified under Improper Verification of Cryptographic Signature. CVSS score: 6.7/10. Published 2019-05-15.

How severe is CVE-2019-1809?

Medium severity. CVSS v3 base score is 6.7 out of 10.

Vulnerability in Cisco 7000 10-Slot

CVE-2019-1809

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software patch on an affected device. The vulnerability is due to improper verification of digital signatures for patch images. An attacker could exploit this vulnerability by crafting an unsigned software patch to bypass signature checks and loading it on an affected device. A successful exploit could allow the attacker to boot a malicious software patch image.

EPSS: 0.002 (8.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Cisco 7000_10-slot
Cisco 7000_18-slot
Cisco 7000_4-slot
Cisco 7000_9-slot
Cisco 7700_10-slot
Cisco 7700_18-slot
Cisco 7700_2-slot
Cisco 7700_6-slot
Cisco Nx-os Software — versions unspecified
Cisco Mds_9706

Weakness classification (CWE)

CWE-347 — Improper Verification of Cryptographic Signature

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)

Frequently asked questions

What is CVE-2019-1809?: CVE-2019-1809 is a medium-severity vulnerability in Cisco 7000 10-Slot, classified under Improper Verification of Cryptographic Signature. CVSS score: 6.7/10. Published 2019-05-15.
How severe is CVE-2019-1809?: Medium severity. CVSS v3 base score is 6.7 out of 10.