CVE-2019-1735 MEDIUM

CVE-2019-1735: Cisco NX-OS Software Command Injection Vulnerability (CVE-2019-1735)

Vendor Cisco
Product Cisco NX-OS Software
Weakness CWE-77
Published May 15, 2019
Last update November 21, 2024

CVSS base score

4.4/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands with elevated privileges on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid user credentials to exploit this vulnerability.

Key dates

02Disclosure timeline

May 15, 2019 CVE published
November 21, 2024 Record updated