High severity · published Mar 6, 2019
CVE-2019-1593
Cisco NX-OS Software Bash Shell Role-Based Access Control Bypass Privilege Escalation Vulnerability
7.8
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to escalate their privilege level by executing commands authorized to other user roles. The attacker must authenticate with valid user credentials. The vulnerability is due to the incorrect implementation of a Bash shell command that allows role-based access control (RBAC) to be bypassed. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Bash prompt. A successful exploit could allow the attacker to escalate their privilege level by executing commands that should be restricted to other roles. For example, a dev-ops user could escalate their privilege level to admin with a successful exploit of this vulnerability.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N3
Nexus 3000 Series Switches · Cisco
before 7.0(3)I7(4) · source: vendor
N3
Nexus 3500 Platform Switches · Cisco
before 7.0(3)I7(4) · source: vendor
N3
Nexus 3600 Platform Switches · Cisco
before 7.0(3)F3(5) · source: vendor
N7
Nexus 7000 and 7700 Series Switches · Cisco
before 8.2(3) · source: vendor
N9
Nexus 9000 Series Fabric Switches in ACI Mode · Cisco
before 13.2(4d); before 14.0(1h) · source: vendor
N9
Nexus 9000 Series Switches in Standalone NX-OS Mode · Cisco
before 7.0(3)I4(9); before 7.0(3)I7(4) · source: vendor
NX
Nx-os · Cisco
7.0\(3\)i5 before 7.0\(3\)i7\(4\); 7.0\(3\)i4 before 7.0\(3\)i4\(9\); 7.0\(3\) before 7.0\(3\)i7\(4\); 7.0\(3\) before 7.0\(3\)f3\(5\); 8.1 before 8.2\(3\); 8.3 before 8.3\(1\); +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-1593
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-1593
Third Party Advisory
http://www.securityfocus.com/bid/107324
Patch
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nx-os-bash-escal
More from Nexus 3000 Series Switches
8.8
CVE-2019-1614
Cisco NX-OS Software NX-API Command Injection Vulnerability
8.6
CVE-2019-1599
Cisco NX-OS Software Netstack Denial of Service Vulnerability
7.8
CVE-2019-1605
Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability
7.8
CVE-2019-1606
Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606)
7.8
CVE-2019-1602
Cisco NX-OS Software Privilege Escalation Vulnerability
