Lucene search

[email protected]CVE-2019-1968

HistoryAug 30, 2019 - 9:15 a.m.

CVE-2019-1968

2019-08-3009:15:20

CWE-116

CWE-20

[email protected]

web.nvd.nist.gov

cve-2019-1968

cisco

nx-os

software

vulnerability

nvd

dos

denial of service

http

remote

attack

cve

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

43.1%

JSON

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default.

Affected configurations

NVD

Node

cisconx-osMatch7.3

cisconx-osMatch8.1

cisconx-osMatch8.2

cisconx-osMatch8.3

AND

ciscomds_9000Match-

ciscomds_9100Match-

ciscomds_9140Match-

ciscomds_9200Match-

ciscomds_9500Match-

ciscomds_9700Match-

Node

cisconx-osMatch6.1\(2\)i2

cisconx-osMatch6.1\(2\)i3

cisconx-osMatch7.0\(3\)i4

cisconx-osMatch7.0\(3\)i7

cisconx-osMatch9.2

AND

cisconexus_3016Match-

cisconexus_3048Match-

cisconexus_3064Match-

cisconexus_3064-tMatch-

cisconexus_31108pc-vMatch-

cisconexus_31108tc-vMatch-

cisconexus_31128pqMatch-

cisconexus_3132c-zMatch-

cisconexus_3132qMatch-

cisconexus_3132q-vMatch-

cisconexus_3132q-xlMatch-

cisconexus_3164qMatch-

cisconexus_3172Match-

cisconexus_3172pq-xlMatch-

cisconexus_3172tqMatch-

cisconexus_3172tq-32tMatch-

cisconexus_3172tq-xlMatch-

cisconexus_3232cMatch-

cisconexus_3264c-eMatch-

cisconexus_3264qMatch-

cisconexus_3408-sMatch-

cisconexus_34180ycMatch-

cisconexus_3432d-sMatch-

cisconexus_3464cMatch-

cisconexus_9000vMatch-

cisconexus_92160yc-xMatch-

cisconexus_92300ycMatch-

cisconexus_92304qcMatch-

cisconexus_92348gc-xMatch-

cisconexus_9236cMatch-

cisconexus_9272qMatch-

cisconexus_93108tc-exMatch-

cisconexus_93108tc-fxMatch-

cisconexus_93120txMatch-

cisconexus_93128txMatch-

cisconexus_93180lc-exMatch-

cisconexus_93180yc-exMatch-

cisconexus_93180yc-fxMatch-

cisconexus_93216tc-fx2Match-

cisconexus_93240yc-fx2Match-

cisconexus_9332cMatch-

cisconexus_9332pqMatch-

cisconexus_93360yc-fx2Match-

cisconexus_9336c-fx2Match-

cisconexus_9336pq_aci_spineMatch-

cisconexus_9348gc-fxpMatch-

cisconexus_9364cMatch-

cisconexus_9372pxMatch-

cisconexus_9372px-eMatch-

cisconexus_9372txMatch-

cisconexus_9372tx-eMatch-

cisconexus_9396pxMatch-

cisconexus_9396txMatch-

Node

cisconx-osMatch6.0\(2\)a8

cisconx-osMatch7.0\(3\)i7

cisconx-osMatch9.2

AND

cisconexus_3524Match-

cisconexus_3524-xMatch-

cisconexus_3524-xlMatch-

cisconexus_3548Match-

cisconexus_3548-xMatch-

cisconexus_3548-xlMatch-

Node

cisconx-osMatch7.0\(3\)f

cisconx-osMatch9.2

AND

cisconexus_36180yc-rMatch-

cisconexus_3636c-rMatch-

cisconexus_9504Match-

cisconexus_9508Match-

cisconexus_9516Match-

Node

cisconexus_5548pMatch-

cisconexus_5548upMatch-

cisconexus_5596tMatch-

cisconexus_5596upMatch-

cisconexus_56128pMatch-

cisconexus_5624qMatch-

cisconexus_5648qMatch-

cisconexus_5672upMatch-

cisconexus_5696qMatch-

cisconexus_6001Match-

cisconexus_6004Match-

AND

cisconx-osMatch7.1

cisconx-osMatch7.2

cisconx-osMatch7.3

Node

cisconexus_7000Match-

cisconexus_7000_10-slotMatch-

cisconexus_7000_18-slotMatch-

cisconexus_7000_4-slotMatch-

cisconexus_7000_9-slotMatch-

cisconexus_7700Match-

cisconexus_7700_10-slotMatch-

cisconexus_7700_18-slotMatch-

cisconexus_7700_2-slotMatch-

cisconexus_7700_6-slotMatch-

AND

cisconx-osMatch7.2

cisconx-osMatch7.3

cisconx-osMatch8.0

cisconx-osMatch8.1

cisconx-osMatch8.2

cisconx-osMatch8.3

CPENameOperatorVersion
cisco:nx-oscisco nx-oseq7.3
cisco:nx-oscisco nx-oseq8.1
cisco:nx-oscisco nx-oseq8.2
cisco:nx-oscisco nx-oseq8.3

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	eq	7.3
cisco:nx-os	cisco nx-os	eq	8.1
cisco:nx-os	cisco nx-os	eq	8.2
cisco:nx-os	cisco nx-os	eq	8.3

CNA Affected

[
  {
    "product": "Cisco NX-OS Software 6.0(2)A4(1)",
    "vendor": "Cisco",
    "versions": [
      {
        "lessThan": "8.3(2)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-api-dos

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

43.1%

JSON

Related for CVE-2019-1968

nvd1 cisco1 nessus2 cvelist1 prion1