CVE-2019-1730

Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability

MEDIUM

6.7

CVSS Score

Published: May 15, 2019 at 04:50 PM UTC

Updated: June 17, 2026 at 02:29 AM UTC

48 products affected across 1 vendorNx OSNexus 9508Nexus 93120Tx

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell. The attacker must authenticate with valid administrator device credentials. The vulnerability is due to the incorrect implementation of a CLI command that allows a Bash command to be incorrectly invoked on the Guest Shell CLI. An attacker could exploit this vulnerability by authenticating to the device and entering a crafted command at the Guest Shell prompt. A successful exploit could allow the attacker to issue commands that should be restricted by a Guest Shell account.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

v < 8.3(1)7.0(3) ≤ v < 7.0(3)f3(5)7.0(3)i4 ≤ v < 7.0(3)i4(9)7.0(3)i7 ≤ v < 7.0(3)i7(4)8.1 ≤ v < 8.3(1)

Affected range stops below 7.0(3)f3(5), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i4(9), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i7(4), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.3(1), so it looks safe — our inference, not a vendor statement

cisco-nexus-3000 (environment) · cisco-nexus-3100 (environment) · cisco-nexus-3100-z (environment) · cisco-nexus-3100v (environment) · cisco-nexus-3200 (environment) · cisco-nexus-3400 (environment) · cisco-nexus-3500 (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-3636c-r (environment) · cisco-nexus-7000 (environment) · cisco-nexus-7700 (environment) · cisco-nexus-9000v (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-93180lc-ex (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372px-e (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9372tx-e (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9504 (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9516 (environment)

Nexus 3000 · Ciscodevice

80%

All versions

Nexus 3100 · Ciscodevice

80%

All versions

Nexus 3100-Z · Ciscodevice

80%

All versions

Nexus 3100V · Ciscodevice

80%

All versions