According to its self-reported version, Cisco NX-OS Software is affected by a vulnerability in the NX-API feature of Cisco NX-OS Software that could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTTPS request to an internal service on an affected device that has the NX-API feature enabled. A successful exploit could allow the attacker to cause a buffer overflow and execute arbitrary code as root.
Note: The NX-API feature is disabled by default.

Please see the included Cisco BIDs and Cisco Security Advisory for more information

自己報告されたバージョンによると、Cisco NX-OSソフトウェアはCisco NX-OSソフトウェアのNX-API機能の脆弱性による影響を受けるため、認証されたローカルの攻撃者がroot権限で任意のコードを実行する可能性があります。この脆弱性は、NX-API機能での不適切な入力の検証によります。攻撃者がこの脆弱性を悪用し、NX-API機能が有効になっている影響を受けるデバイスの内部サービスに、細工されたHTTPまたはHTTPSリクエストを送信する可能性があります。悪用に成功すると、攻撃者がバッファオーバーフローを引き起こし、rootとして任意のコードを実行する可能性があります。注意：NX-API機能は、デフォルトでは無効です。詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください

根据其自我报告的版本，Cisco NX-OS 软件受 Cisco NX-OS 软件 NX-API 功能中的漏洞影响，允许经身份验证的本地攻击者以根权限执行任意代码。此漏洞之所以存在，是因为 NX-API 功能中错误的输入验证。攻击者可通过将构建的 HTTP 或 HTTPS 请求发送到受影响设备（启用 NX-API 功能）上的内部服务来利用此漏洞。成功利用可允许攻击者造成缓冲区溢出及以根权限执行任意代码。注意：NX-API 功能默认禁用。若要了解更多信息，请参见所附的 Cisco BID 和 Cisco 安全公告

根據其自我報告的版本，Cisco NX-OS 軟體受到 Cisco NX-OS 軟體 NX-API 功能中一個弱點的影響，經驗證的本機攻擊者可藉以利用 root 身分執行任意程式碼。此弱點之所以存在，是因為未在 NX-API 功能中進行正確的輸入驗證。攻擊者可藉由將特製 HTTP 或 HTTPS 要求傳送至已啟用 NX-API 功能的受影響裝置上的內部服務，而惡意利用此弱點。若惡意利用得逞，攻擊者即可造成緩衝區溢位，並以 root 身份執行任意程式碼。注意：NX-API 功能預設為停用狀態。如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary code as root. The vulnerability is due to incorrect input validation in the NX-API feature. An attacker could exploit this vulnerability by sending a crafted HTTP or HTTPS request to an internal service on an affected device that has the NX-API feature enabled. A successful exploit could allow the attacker to cause a buffer overflow and execute arbitrary code as root. Note: The NX-API feature is disabled by default. MDS 9000 Series Multilayer Switches are affected in versions prior to 8.1(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(8). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.3(2)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 7.3(3)D1(1). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected in versions prior to 7.0(3)I4(8) and 7.0(3)I7(1). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
132318	Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability	Nessus	CISCO	2019/12/20	2024/4/2	high
132318	Cisco NX-OSソフトウェアのNX-API任意のコード実行の脆弱性	Nessus	CISCO	2019/12/20	2024/4/2	high
132318	Cisco NX-OS 软件 NX-API 任意代码执行漏洞	Nessus	CISCO	2019/12/20	2024/4/2	high
132318	Cisco NX-OS 軟體 NX-API 任意程式碼執行弱點	Nessus	CISCO	2019/12/20	2024/4/2	high
501274	Cisco NX-OS Software NX-API Arbitrary Code Execution (CVE-2019-1605)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	high

偵測

搜尋 Plugin

high

high

high

high

high