What is CVE-2019-1969?

CVE-2019-1969 is a medium-severity vulnerability in Cisco Nx-Os Software, classified under CWE-264. CVSS score: 5.3/10. Published 2019-08-30.

How severe is CVE-2019-1969?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Improper input validation in Cisco Nx-Os Software

CVE-2019-1969

A vulnerability in the implementation of the Simple Network Management Protocol (SNMP) Access Control List (ACL) feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to perform SNMP polling of an affected device, even if it is configured to deny SNMP traffic. The vulnerability is due to an incorrect length check when the configured ACL name is the maximum length, which is 32 ASCII characters. An attacker could exploit this vulnerability by performing SNMP polling of an affected device. A successful exploit could allow the attacker to perform SNMP polling that should have been denied. The attacker has no control of the configuration of the SNMP ACL name.

EPSS: 0.014 (69.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.

Affected products

Cisco Nx-os Software — versions unspecified
Cisco Nexus_3016
Cisco Nexus_3048
Cisco Nexus_3064
Cisco Nexus_3064-t
Cisco Nexus_31108pc-v
Cisco Nexus_31108tc-v
Cisco Nexus_31128pq
Cisco Nexus_3132c-z
Cisco Nexus_3132q

Weakness classification (CWE)

References

psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2019-1969?: CVE-2019-1969 is a medium-severity vulnerability in Cisco Nx-Os Software, classified under CWE-264. CVSS score: 5.3/10. Published 2019-08-30.
How severe is CVE-2019-1969?: Medium severity. CVSS v3 base score is 5.3 out of 10.