CVE-2019-1812 - CVE House

Back to Database

Status published Medium CVE-2019-1812

Cisco NX-OS CLI Command Software Image Signature Verification Vulnerabilities

6.7 CVSS

Vulnerability Description

A vulnerability in the Image Signature Verification feature of Cisco NX-OS Software could allow an authenticated, local attacker with administrator-level credentials to install a malicious software image on an affected device. The vulnerability exists because software digital signatures are not properly verified during CLI command execution. An attacker could exploit this vulnerability to install an unsigned software image on an affected device.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-1812

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from Cisco

View All →

Cisco Secure Email Gateway and Cisco Secure Email and Web Manager Remote Command Execution Vulnerability

Cisco Unified Intelligence Center API Information Disclosure Vulnerability

Cisco Unified Contact Center Express Remote Code Execution Vulnerability

Cisco Unified Contact Center Express Arbitrary File Upload Vulnerability

Cisco Unified Contact Center Express Arbitrary File Download Vulnerability

Affected Vendor

Cisco

View all reports →

Affected Software

Cisco NX-OS Software

Vulnerable Versions:

unspecified

Timeline

Official Publish: May 15th, 2019

Last Modified: November 20th, 2024

Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1553 Subvert Trust Controls

Defense Evasion

T1190 Exploit Public-Facing Application

T1078 Valid Accounts

T1550 Use Alternate Authentication Material

Defense Evasion

T1565 Data Manipulation