According to its self-reported version, the Cisco NX-OS Software is affected by an unauthorized directory access vulnerability. This is due to a flaw in the implementation of file system permissions. An authenticated, local attacker could exploit this to access sensitive and critical files on the file system. Please see the included Cisco BIDs and the Cisco Security Advisory for more information.

自己報告されたバージョンによると、Cisco NX-OSソフトウェアは不正なディレクトリアクセスの脆弱性の影響を受けます。これはファイルシステムのアクセス許可の実装に欠陥があるためです。認証されたローカルの攻撃者がこれを悪用してファイルシステム上の秘密の重要なファイルにアクセスする可能性があります。詳細については、付属のCisco BIDおよびCisco Security Advisoryを参照してください。

根据其自我报告的版本，Cisco NX-OS 软件受到未授权目录访问漏洞的影响。这是因为文件系统权限实现中存在一个缺陷。经身份验证的本地攻击者可恶意利用此缺陷，在文件系统上访问敏感和重要文件。若要了解更多信息，请参见所附的 Cisco BID 和 Cisco 安全公告。

根據其自我報告的版本，Cisco NX-OS 軟體受到一個未授權目錄存取弱點影響。這是因為檔案系統權限實作中有一個缺陷。經驗證的本機攻擊者可惡意利用此缺陷，在檔案系統上存取敏感和重要檔案。如需詳細資訊，請參閱隨附的 Cisco BID 和 Cisco 安全性公告。

A vulnerability in the file system permissions of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive information that is stored in the file system of an affected system. The vulnerability is due to improper implementation of file system permissions. An attacker could exploit this vulnerability by accessing and modifying restricted files. A successful exploit could allow the attacker to access sensitive and critical files. Firepower 4100 Series Next-Generation Firewalls are affected in versions prior to 2.2.2.91 and 2.3.1.110. Firepower 9300 Series Next-Generation Firewalls are affected in versions prior to 2.2.2.91 and 2.3.1.110. MDS 9000 Series Multilayer Switches are affected in versions prior to 6.2(25), 8.1(1b), and 8.3(1). Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 6.0(2)A8(10) and 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected in versions prior to 7.1(5)N1(1b) and 7.3(3)N1(1). Nexus 7000 and 7700 Series Switches are affected in versions prior to 6.2(22), 7.3(3)D1(1), and 8.2(3). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I4(9) and 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名稱	產品	系列	已發布	已更新	嚴重性
125390	Cisco NX-OS Software Unauthorized Directory Access Vulnerability	Nessus	CISCO	2019/5/24	2024/5/21	medium
125390	Cisco NX-OSソフトウェアの不正なディレクトリアクセスの脆弱性	Nessus	CISCO	2019/5/24	2024/5/21	medium
125390	Cisco NX-OS 软件未授权目录访问漏洞	Nessus	CISCO	2019/5/24	2024/5/21	medium
125390	Cisco NX-OS 軟體未授權目錄存取弱點	Nessus	CISCO	2019/5/24	2024/5/21	medium
501366	Cisco FXOS and NX-OS Software Unauthorized Directory Access (CVE-2019-1600)	Tenable OT Security	Tenable.ot	2023/7/25	2023/7/26	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium