CVE-2019-1732

Cisco NX-OS Software Remote Package Manager Command Injection Vulnerability

MEDIUM

6.4

CVSS Score

Published: May 15, 2019 at 04:50 PM UTC

Updated: June 17, 2026 at 02:29 AM UTC

17 products affected across 1 vendorNx OSNexus 3548-XlNexus 3524-X

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.4

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

A vulnerability in the Remote Package Manager (RPM) subsystem of Cisco NX-OS Software could allow an authenticated, local attacker with administrator credentials to leverage a time-of-check, time-of-use (TOCTOU) race condition to corrupt local variables, which could lead to arbitrary command injection. The vulnerability is due to the lack of a proper locking mechanism on critical variables that need to stay static until used. An attacker could exploit this vulnerability by authenticating to an affected device and issuing a set of RPM-related CLI commands. A successful exploit could allow the attacker to perform arbitrary command injection. The attacker would need administrator credentials for the targeted device.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Nx OS · Cisconpm

95%

v < 8.3(1)7.0(3) ≤ v < 7.0(3)f3(5)7.0(3)i4 ≤ v < 7.0(3)i7(4)

Affected range stops below 7.0(3)f3(5), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i7(4), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.3(1), so it looks safe — our inference, not a vendor statement

cisco-nexus-3000 (environment) · cisco-nexus-3100 (environment) · cisco-nexus-3100-z (environment) · cisco-nexus-3100v (environment) · cisco-nexus-3200 (environment) · cisco-nexus-3400 (environment) · cisco-nexus-3500 (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-3600 (environment) · cisco-nexus-9000 (environment) · cisco-nexus-9200 (environment) · cisco-nexus-9300 (environment) · cisco-nexus-9500 (environment)

Nexus 3000 · Ciscodevice

80%

All versions

Nexus 3100 · Ciscodevice

80%

All versions

Nexus 3100-Z · Ciscodevice

80%

All versions

Nexus 3100V · Ciscodevice

80%

All versions