CVE-2019-1734

Cisco FXOS and NX-OS Software Sensitive File Read Information Disclosure Vulnerability

MEDIUM

5.5

CVSS Score

Published: November 5, 2019 at 07:15 PM UTC

Updated: June 17, 2026 at 02:29 AM UTC

94 products affected across 1 vendorNx OSFirepower Extensible Operating SystemNexus 9508

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM5.5

Exploit prediction

EPSS 0.3%

SSVC

No known exploit

Description

A vulnerability in the implementation of a CLI diagnostic command in Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to view sensitive system files that should be restricted. The attacker could use this information to conduct additional reconnaissance attacks. The vulnerability is due to incomplete role-based access control (RBAC) verification. An attacker could exploit this vulnerability by authenticating to the device and issuing a specific CLI diagnostic command with crafted user-input parameters. An exploit could allow the attacker to perform an arbitrary read of a file on the device, and the file may contain sensitive information. The attacker needs valid device credentials to exploit this vulnerability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Firepower Extensible Operating System · Cisco

95%

v < 2.2.2.912.3 ≤ v < 2.3.1.1112.4 ≤ v < 2.4.1.101

Affected range stops below 2.2.2.91, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.3.1.111, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.4.1.101, so it looks safe — our inference, not a vendor statement

cisco-firepower-4110 (environment) · cisco-firepower-4112 (environment) · cisco-firepower-4115 (environment) · cisco-firepower-4120 (environment) · cisco-firepower-4125 (environment) · cisco-firepower-4140 (environment) · cisco-firepower-4145 (environment) · cisco-firepower-4150 (environment) · cisco-firepower-9300 (environment)

Nx OS · Cisconpm

95%

v < 4.0(1a)v < 6.0(2)a4(1)v < 6.2(6)v < 6.2(7)v < 7.0(3)i4(9)v < 7.1(4)n1(1)7.0(3) ≤ v < 7.0(3)f3(5)7.0(3)i4 ≤ v < 7.0(3)i4(9)7.0(3)i7 ≤ v < 7.0(3)i7(6)7.2 ≤ v < 7.3(0)n1(1)

Affected range stops below 4.0(1a), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.0(2)a4(1), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.2(6), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.2(7), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)f3(5), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i4(9), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i7(6), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.1(4)n1(1), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3(0)n1(1), so it looks safe — our inference, not a vendor statement

cisco-mds-9100 (environment) · cisco-mds-9200 (environment) · cisco-mds-9500 (environment) · cisco-mds-9700 (environment) · cisco-nexus-3016 (environment) · cisco-nexus-3048 (environment) · cisco-nexus-3064 (environment) · cisco-nexus-3064-t (environment) · cisco-nexus-31108pc-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132c-z (environment) · cisco-nexus-3132q (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3132q-xl (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172 (environment) · cisco-nexus-3172pq-xl (environment) · cisco-nexus-3172tq (environment) · cisco-nexus-3172tq-32t (environment) · cisco-nexus-3172tq-xl (environment) · cisco-nexus-3232c (environment) · cisco-nexus-3264c-e (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3408-s (environment) · cisco-nexus-34180yc (environment) · cisco-nexus-3432d-s (environment) · cisco-nexus-3464c (environment) · cisco-nexus-3524 (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548 (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-3636c-r (environment) · cisco-nexus-5548p (environment) · cisco-nexus-5548up (environment) · cisco-nexus-5596t (environment) · cisco-nexus-5596up (environment) · cisco-nexus-56128p (environment) · cisco-nexus-5624q (environment) · cisco-nexus-5648q (environment) · cisco-nexus-5672up (environment) · cisco-nexus-5696q (environment) · cisco-nexus-6001 (environment) · cisco-nexus-6004 (environment) · cisco-nexus-7000 (environment) · cisco-nexus-7700 (environment) · cisco-nexus-9000v (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-93180lc-ex (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372px-e (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9372tx-e (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9504 (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9516 (environment) · cisco-ucs-6200 (environment) · cisco-ucs-6300 (environment)

Firepower 4110 · Ciscodevice

80%

All versions

Firepower 4112 · Ciscodevice

80%

All versions

Firepower 4115 · Ciscodevice

80%

All versions

Firepower 4120 · Ciscodevice

80%

All versions