Cisco NX-OS up to 9.1(1)sv1(3.1.8) on MDS 9000/Nexus 1000V CLI os command injection
CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
---|---|---|
4.6 | $0-$5k | 0.00 |
A vulnerability, which was classified as problematic, was found in Cisco NX-OS up to 9.1(1)sv1(3.1.8) on MDS 9000/Nexus 1000V (Router Operating System). Affected is an unknown code block of the component CLI. The manipulation with an unknown input leads to a os command injection vulnerability. CWE is classifying the issue as CWE-78. The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability.
The weakness was disclosed 07/01/2015 with Cisco as 39583 as confirmed vulnerability alert (Website). The advisory is available at tools.cisco.com. This vulnerability is traded as CVE-2015-4237 since 06/04/2015. The exploitability is told to be easy. Local access is required to approach this attack. The requirement for exploitation is a authentication. The technical details are unknown and an exploit is not available. This vulnerability is assigned to T1202 by the MITRE ATT&CK project.
The commercial vulnerability scanner Qualys is able to test this issue with plugin 316052 (Cisco NX-OS Devices Command Line Interface Local Privilege Escalation Vulnerability (Cisco-SA-20150701-CVE-2015-4237)).
The vulnerability is also documented in the vulnerability database at X-Force (104318). The entry 76239 is pretty similar.
Product
Type
Vendor
Name
Version
License
Support
- end of life (old version)
CPE 2.3
CPE 2.2
CVSSv4
VulDB CVSS-B Score: 🔍VulDB CVSS-BT Score: 🔍
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv3
VulDB Meta Base Score: 5.3VulDB Meta Temp Score: 4.6
VulDB Base Score: 5.3
VulDB Temp Score: 4.6
VulDB Vector: 🔍
VulDB Reliability: 🔍
CVSSv2
AV | AC | Au | C | I | A |
---|---|---|---|---|---|
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
💳 | 💳 | 💳 | 💳 | 💳 | 💳 |
Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
---|---|---|---|---|---|
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Exploiting
Class: Os command injectionCWE: CWE-78 / CWE-74 / CWE-707
CAPEC: 🔍
ATT&CK: 🔍
Local: Yes
Remote: No
Availability: 🔍
Status: Unproven
EPSS Score: 🔍
EPSS Percentile: 🔍
Price Prediction: 🔍
Current Price Estimation: 🔍
0-Day | unlock | unlock | unlock | unlock |
---|---|---|---|---|
Today | unlock | unlock | unlock | unlock |
OpenVAS ID: 103402
OpenVAS Name: Cisco Nexus Operating System Devices Command Line Interface Local Privilege Escalation Vulnerability
OpenVAS File: 🔍
OpenVAS Family: 🔍
Qualys ID: 🔍
Qualys Name: 🔍
Threat Intelligence
Interest: 🔍Active Actors: 🔍
Active APT Groups: 🔍
Countermeasures
Recommended: no mitigation knownStatus: 🔍
0-Day Time: 🔍
Timeline
06/04/2015 🔍07/01/2015 🔍
07/01/2015 🔍
07/01/2015 🔍
07/02/2015 🔍
07/03/2015 🔍
11/02/2015 🔍
05/23/2022 🔍
Sources
Vendor: cisco.comAdvisory: 39583
Organization: Cisco
Status: Confirmed
CVE: CVE-2015-4237 (🔍)
X-Force: 104318 - Cisco Nexus devices CLI privilege escalation
SecurityTracker: 1032775
Vulnerability Center: 54088 - Cisco NX-OS Local Privilege Escalation Vulnerability in CLI Parser, Medium
SecurityFocus: 75528 - Cisco NX-OS Software for Nexus Series CVE-2015-4237 Local Privilege Escalation Vulnerability
See also: 🔍
Entry
Created: 07/02/2015 11:33Updated: 05/23/2022 01:22
Changes: 07/02/2015 11:33 (63), 05/04/2019 19:15 (7), 05/23/2022 01:22 (3)
Complete: 🔍
No comments yet. Languages: en.
Please log in to comment.