Cisco NX-OS Bash Shell access control

Summaryinfo

A vulnerability, which was classified as critical, was found in Cisco NX-OS. Impacted is an unknown function of the component Bash Shell. Such manipulation leads to access control. This vulnerability is traded as CVE-2019-1730. An attack has to be approached locally. There is no exploit available.

Detailsinfo

A vulnerability, which was classified as critical, has been found in Cisco NX-OS (Router Operating System) (affected version not known). Affected by this issue is some unknown functionality of the component Bash Shell. The manipulation with an unknown input leads to a access control vulnerability. Using CWE to declare the problem leads to CWE-264. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell. The attacker must authenticate with valid administrator device credentials. The vulnerability is due to the incorrect implementation of a CLI command that allows a Bash command to be incorrectly invoked on the Guest Shell CLI. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Guest Shell prompt. A successful exploit could allow the attacker to issue commands that should be restricted by a Guest Shell account.

The bug was discovered 05/15/2019. The weakness was shared 05/15/2019 as cisco-sa-20190515-nxos-bash-by as confirmed advisory (Website). The advisory is available at tools.cisco.com. This vulnerability is handled as CVE-2019-1730 since 12/06/2018. Local access is required to approach this attack. A simple authentication is required for exploitation. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $5k-$25k at the moment (estimation calculated on 09/19/2023). This vulnerability is assigned to T1068 by the MITRE ATT&CK project.

The commercial vulnerability scanner Qualys is able to test this issue with plugin 316460 (Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability(cisco-sa-20190515-nxos-bash-bypass)).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The entries VDB-135078, VDB-135077, VDB-135076 and VDB-135075 are related to this item. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Router Operating System

Vendor

• Cisco

Name

• NX-OS

License

• commercial

Website

• Vendor: https://www.cisco.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion