CVE-2019-1811 MEDIUM

CVE-2019-1811: Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities

Vendor Cisco
Product Cisco NX-OS Software
Weakness CWE-347
Published May 15, 2019
Last update November 20, 2024
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an unsigned software image on an affected device.

Key dates

02Disclosure timeline

May 15, 2019 CVE published
November 20, 2024 Record updated