Details of VAR-201903-0580

ID

VAR-201903-0580

CVE

CVE-2019-1596

TITLE

Cisco NX-OS Vulnerability related to authorization, authority, and access control in software

Trust: 0.8

sources: JVNDB: JVNDB-2019-002263

DESCRIPTION

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level to root. The attacker must authenticate with valid user credentials. The vulnerability is due to incorrect permissions of a system executable. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Bash prompt. A successful exploit could allow the attacker to escalate their privilege level to root. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5). Cisco NX-OS The software contains vulnerabilities related to authorization, permissions, and access control.Information is obtained, information is altered, and service operation is disrupted (DoS) There is a possibility of being put into a state. Cisco NX-OS Software is prone to a local privilege-escalation vulnerability. This issue is being tracked by Cisco Bug IDs CSCvj58962 and CSCvk71078

Trust: 1.98

sources: NVD: CVE-2019-1596 // JVNDB: JVNDB-2019-002263 // BID: 107340 // VULHUB: VHN-148058

AFFECTED PRODUCTS

vendor:	cisco	model:	nx-os	scope:	gte	version:	7.0\(3\)f3\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	gte	version:	7.0\(3\)i7	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	gte	version:	7.0\(3\)i5	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	lt	version:	7.0\(3\)i7\(4\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	lt	version:	7.0\(3\)f3\(5\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	lt	version:	7.0\(3\)i4\(9\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nx-os 7.0 i7	scope:	-	version:	-	Trust: 0.6
vendor:	cisco	model:	nx-os 7.0 i7	scope:	ne	version:	-	Trust: 0.6
vendor:	cisco	model:	nx-os 7.0 f3	scope:	ne	version:	-	Trust: 0.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	9.2	Trust: 0.3
vendor:	cisco	model:	nx-os 8.3 s1	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	nx-os 7.0 i6	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	nx-os 7.0 i5	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	nx-os 7.0 i4	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	nx-os	scope:	eq	version:	7.0(3)	Trust: 0.3
vendor:	cisco	model:	nx-os 6.0 a8	scope:	-	version:	-	Trust: 0.3
vendor:	cisco	model:	nexus r-series line cards and fabric modules	scope:	eq	version:	95000	Trust: 0.3
vendor:	cisco	model:	nexus series switches in standalone nx-os mode	scope:	eq	version:	90000	Trust: 0.3
vendor:	cisco	model:	nexus platform switches	scope:	eq	version:	36000	Trust: 0.3
vendor:	cisco	model:	nexus platform switches	scope:	eq	version:	35000	Trust: 0.3
vendor:	cisco	model:	nexus series switches	scope:	eq	version:	30000	Trust: 0.3
vendor:	cisco	model:	nx-os	scope:	ne	version:	9.2(2)	Trust: 0.3
vendor:	cisco	model:	nx-os 7.0 i4	scope:	ne	version:	-	Trust: 0.3
vendor:	cisco	model:	nx-os 6.0 a8	scope:	ne	version:	-	Trust: 0.3

sources: BID: 107340 // JVNDB: JVNDB-2019-002263 // NVD: CVE-2019-1596

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2019-1596
value:	HIGH
Trust: 1.0
ykramarz@cisco.com:	CVE-2019-1596
value:	HIGH
Trust: 1.0
NVD:	CVE-2019-1596
value:	HIGH
Trust: 0.8
CNNVD:	CNNVD-201903-193
value:	HIGH
Trust: 0.6
VULHUB:	VHN-148058
value:	HIGH
Trust: 0.1

nvd@nist.gov:	CVE-2019-1596
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-148058
severity:	HIGH
baseScore:	7.2
vectorString:	AV:L/AC:L/AU:N/C:C/I:C/A:C
accessVector:	LOCAL
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	COMPLETE
integrityImpact:	COMPLETE
availabilityImpact:	COMPLETE
exploitabilityScore:	3.9
impactScore:	10.0
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

ykramarz@cisco.com:	CVE-2019-1596
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.0
Trust: 1.8
nvd@nist.gov:	CVE-2019-1596
baseSeverity:	HIGH
baseScore:	7.8
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	HIGH
exploitabilityScore:	1.8
impactScore:	5.9
version:	3.1
Trust: 1.0

sources: VULHUB: VHN-148058 // JVNDB: JVNDB-2019-002263 // CNNVD: CNNVD-201903-193 // NVD: CVE-2019-1596 // NVD: CVE-2019-1596

PROBLEMTYPE DATA

problemtype:	CWE-264	Trust: 1.9
problemtype:	CWE-732	Trust: 1.1

sources: VULHUB: VHN-148058 // JVNDB: JVNDB-2019-002263 // NVD: CVE-2019-1596

THREAT TYPE

local

Trust: 0.9

sources: BID: 107340 // CNNVD: CNNVD-201903-193

TYPE

permissions and access control issues

Trust: 0.6

sources: CNNVD: CNNVD-201903-193

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-002263

PATCH

title:	cisco-sa-20190306-nxos-pe	url:	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-pe	Trust: 0.8
title:	Cisco NX-OS Software Fixes for permission permissions and access control vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=89863	Trust: 0.6

sources: JVNDB: JVNDB-2019-002263 // CNNVD: CNNVD-201903-193

EXTERNAL IDS

db:	NVD	id:	CVE-2019-1596	Trust: 2.8
db:	BID	id:	107340	Trust: 2.0
db:	JVNDB	id:	JVNDB-2019-002263	Trust: 0.8
db:	CNNVD	id:	CNNVD-201903-193	Trust: 0.7
db:	AUSCERT	id:	ESB-2019.0709	Trust: 0.6
db:	VULHUB	id:	VHN-148058	Trust: 0.1

sources: VULHUB: VHN-148058 // BID: 107340 // JVNDB: JVNDB-2019-002263 // CNNVD: CNNVD-201903-193 // NVD: CVE-2019-1596

REFERENCES

url:	http://www.securityfocus.com/bid/107340	Trust: 2.3
url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20190306-nxos-pe	Trust: 2.0
url:	https://nvd.nist.gov/vuln/detail/cve-2019-1596	Trust: 1.4
url:	https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-1596	Trust: 0.8
url:	https://tools.cisco.com/security/center/content/ciscosecurityadvisory/cisco-sa-20190306-nx-os-bash-escal	Trust: 0.6
url:	https://www.auscert.org.au/bulletins/76614	Trust: 0.6
url:	https://vigilance.fr/vulnerability/cisco-nx-os-nexus-multiple-vulnerabilities-28681	Trust: 0.6
url:	http://www.cisco.com/	Trust: 0.3
url:	https://bst.cloudapps.cisco.com/bugsearch/bug/cscvj58962	Trust: 0.3
url:	https://bst.cloudapps.cisco.com/bugsearch/bug/cscvk71078	Trust: 0.3

sources: VULHUB: VHN-148058 // BID: 107340 // JVNDB: JVNDB-2019-002263 // CNNVD: CNNVD-201903-193 // NVD: CVE-2019-1596

CREDITS

The Cisco Product Security Incident Response Team (PSIRT) is not aware of any public announcements or malicious use of the vulnerability that is described in this advisory.

Trust: 0.6

sources: CNNVD: CNNVD-201903-193

SOURCES

db:	VULHUB	id:	VHN-148058
db:	BID	id:	107340
db:	JVNDB	id:	JVNDB-2019-002263
db:	CNNVD	id:	CNNVD-201903-193
db:	NVD	id:	CVE-2019-1596

LAST UPDATE DATE

2024-08-14T14:04:35.960000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-148058	date:	2020-10-08T00:00:00
db:	BID	id:	107340	date:	2019-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2019-002263	date:	2019-04-05T00:00:00
db:	CNNVD	id:	CNNVD-201903-193	date:	2020-10-09T00:00:00
db:	NVD	id:	CVE-2019-1596	date:	2020-10-08T19:39:01.467

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-148058	date:	2019-03-07T00:00:00
db:	BID	id:	107340	date:	2019-03-06T00:00:00
db:	JVNDB	id:	JVNDB-2019-002263	date:	2019-04-05T00:00:00
db:	CNNVD	id:	CNNVD-201903-193	date:	2019-03-06T00:00:00
db:	NVD	id:	CVE-2019-1596	date:	2019-03-07T19:29:00.223