According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the CLI of Cisco NX-OS Software. This vulnerability could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow an attacker to make configuration changes to the system as administrator. (CVE-2019-1603)

Please see the included Cisco BIDs and Cisco Security Advisory for more information

自己報告されたバージョンによると、Cisco NX-OSソフトウェアはCLIにある脆弱性の影響を受けます。この脆弱性により、認証されたローカルの攻撃者が低レベルの権限を管理者レベルに昇格させる可能性があります。この脆弱性の原因は、認証の実行が不十分であることです。攻撃者がこの脆弱性を悪用し、標的のデバイスの認証を受けてコマンドを実行し、権限を昇格させる可能性があります。この悪用が成功すると、攻撃者が管理者としてシステムの構成を変更する可能性があります。（CVE-2019-1603）詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください

根据其自我报告的版本，Cisco NX-OS 软件受到 Cisco NX-OS 软件的 CLI 中一个漏洞的影响。此漏洞允许经过身份验证的本地攻击者将较低级别的权限提升到管理员级别权限。此漏洞的原因在于未充分执行授权。攻击者可利用此漏洞，通过向目标设备进行身份验证并执行命令，从而造成权限提升。成功利用此漏洞的攻击者能够以管理员身份修改系统配置。(CVE-2019-1603) 若要了解更多信息，请参见所附的 Cisco BID 和 Cisco 安全公告

根據其自我報告的版本，Cisco NX-OS 軟體受到 Cisco NX-OS 軟體的 CLI 中一個弱點影響。經驗證的本機攻擊者可藉此弱點將較低層級的權限提升至管理員層級。此弱點之所以存在，是因為未實施充份的授權機制。攻擊者可驗證目標裝置並執行可能導致權限提升的命令，從而惡意利用此弱點。若惡意利用得逞，攻擊者即可以管理員的身分進行系統組態變更。(CVE-2019-1603) 如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to escalate lower-level privileges to the administrator level. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow an attacker to make configuration changes to the system as administrator. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches- Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
131778	Cisco NX-OS Software Privilege Escalation Vulnerability	Nessus	CISCO	2019/12/9	2019/12/10	high
131778	Cisco NX-OSソフトウェアの権限昇格の脆弱性	Nessus	CISCO	2019/12/9	2019/12/10	high
131778	Cisco NX-OS 软件权限提升漏洞	Nessus	CISCO	2019/12/9	2019/12/10	high
131778	Cisco NX-OS 軟體權限提升弱點	Nessus	CISCO	2019/12/9	2019/12/10	high
501323	Cisco NX-OS Software Privilege Escalation (CVE-2019-1603)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	high

偵測

搜尋 Plugin

high

high

high

high

high