CVE-2019-1588

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerability

State: Published
Severity: 4.4 Medium
Published: Mar 6, 2019
Updated: Nov 21, 2024
Reserved: Dec 6, 2018

Description

A vulnerability in the Cisco Nexus 9000 Series Fabric Switches running in Application-Centric Infrastructure (ACI) mode could allow an authenticated, local attacker to read arbitrary files on an affected device. The vulnerability is due to a lack of proper input and validation checking mechanisms of user-supplied input sent to an affected device. A successful exploit could allow the attacker unauthorized access to read arbitrary files on an affected device. This vulnerability has been fixed in version 14.0(1h).

Scores

CVSS	Score	Vector	Source
3.0	4.4 Medium	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N	cisco

Weaknesses

CWE-20

Affected Products

Product	Versions
Cisco NX-OS Software for Nexus 9000 Series Fabric Switches ACI ModeCisco	before 14.0(1h)Affected

References

107316vdb-entry
20190306 Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.