CVE-2019-1781

Cisco FXOS and NX-OS Software Command Injection Vulnerability

MEDIUM

6.7

CVSS Score

Published: May 15, 2019 at 07:45 PM UTC

Updated: June 17, 2026 at 02:29 AM UTC

97 products affected across 1 vendorNx OSFxosNexus 9508

Using Cisco NX-OS Software by Cisco?

Get instant alerts when new vulnerabilities affect Cisco NX-OS Software - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

MEDIUM6.7

Exploit prediction

EPSS 0.5%

SSVC

No known exploit

Description

A vulnerability in the CLI of Cisco FXOS Software and Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need administrator credentials to exploit this vulnerability.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Fxos · Cisco

95%

v < 2.2.2.912.3 ≤ v < 2.3.1.1302.4 ≤ v < 2.4.1.222

Affected range stops below 2.2.2.91, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.3.1.130, so it looks safe — our inference, not a vendor statement

Affected range stops below 2.4.1.222, so it looks safe — our inference, not a vendor statement

cisco-firepower-4110 (environment) · cisco-firepower-4120 (environment) · cisco-firepower-4140 (environment) · cisco-firepower-4150 (environment) · cisco-firepower-9300 (environment)

Nx OS · Cisconpm

95%

v < 4.0(1a)v < 6.0(2)a8(11)v < 6.2(22)v < 7.0(3)i4(9)v < 7.3(4)n1(1)v < 8.3(1)5.2 ≤ v < 6.2(25)7.0(3) ≤ v < 7.0(3)f3(5)7.0(3)i4 ≤ v < 7.0(3)i4(9)7.0(3)i7 ≤ v < 7.0(3)i7(4)7.2 ≤ v < 7.3(3)d1(1)7.3 ≤ v < 8.3(2)8.0 ≤ v < 8.2(3)8.3 ≤ v < 8.3(1)

Affected range stops below 4.0(1a), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.0(2)a8(11), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.2(22), so it looks safe — our inference, not a vendor statement

Affected range stops below 6.2(25), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)f3(5), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i4(9), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.0(3)i7(4), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3(3)d1(1), so it looks safe — our inference, not a vendor statement

Affected range stops below 7.3(4)n1(1), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.2(3), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.3(1), so it looks safe — our inference, not a vendor statement

Affected range stops below 8.3(2), so it looks safe — our inference, not a vendor statement

cisco-mds-9132t (environment) · cisco-mds-9148s (environment) · cisco-mds-9148t (environment) · cisco-mds-9222i (environment) · cisco-mds-9250i (environment) · cisco-mds-9706 (environment) · cisco-mds-9710 (environment) · cisco-mds-9718 (environment) · cisco-nexus-3016 (environment) · cisco-nexus-3048 (environment) · cisco-nexus-3064 (environment) · cisco-nexus-3064-t (environment) · cisco-nexus-31108pc-v (environment) · cisco-nexus-31108tc-v (environment) · cisco-nexus-31128pq (environment) · cisco-nexus-3132c-z (environment) · cisco-nexus-3132q (environment) · cisco-nexus-3132q-v (environment) · cisco-nexus-3132q-xl (environment) · cisco-nexus-3164q (environment) · cisco-nexus-3172 (environment) · cisco-nexus-3172pq-xl (environment) · cisco-nexus-3172tq (environment) · cisco-nexus-3172tq-32t (environment) · cisco-nexus-3172tq-xl (environment) · cisco-nexus-3232c (environment) · cisco-nexus-3264c-e (environment) · cisco-nexus-3264q (environment) · cisco-nexus-3408-s (environment) · cisco-nexus-34180yc (environment) · cisco-nexus-3432d-s (environment) · cisco-nexus-3464c (environment) · cisco-nexus-3524 (environment) · cisco-nexus-3524-x (environment) · cisco-nexus-3524-xl (environment) · cisco-nexus-3548 (environment) · cisco-nexus-3548-x (environment) · cisco-nexus-3548-xl (environment) · cisco-nexus-36180yc-r (environment) · cisco-nexus-3636c-r (environment) · cisco-nexus-5548p (environment) · cisco-nexus-5548up (environment) · cisco-nexus-5596t (environment) · cisco-nexus-5596up (environment) · cisco-nexus-56128p (environment) · cisco-nexus-5624q (environment) · cisco-nexus-5648q (environment) · cisco-nexus-5672up (environment) · cisco-nexus-5696q (environment) · cisco-nexus-6001 (environment) · cisco-nexus-6004 (environment) · cisco-nexus-7000 (environment) · cisco-nexus-7700 (environment) · cisco-nexus-9000v (environment) · cisco-nexus-92160yc-x (environment) · cisco-nexus-92300yc (environment) · cisco-nexus-92304qc (environment) · cisco-nexus-92348gc-x (environment) · cisco-nexus-9236c (environment) · cisco-nexus-9272q (environment) · cisco-nexus-93108tc-ex (environment) · cisco-nexus-93108tc-fx (environment) · cisco-nexus-93120tx (environment) · cisco-nexus-93128tx (environment) · cisco-nexus-93180lc-ex (environment) · cisco-nexus-93180yc-ex (environment) · cisco-nexus-93180yc-fx (environment) · cisco-nexus-93216tc-fx2 (environment) · cisco-nexus-93240yc-fx2 (environment) · cisco-nexus-9332c (environment) · cisco-nexus-9332pq (environment) · cisco-nexus-93360yc-fx2 (environment) · cisco-nexus-9336c-fx2 (environment) · cisco-nexus-9336pq-aci-spine (environment) · cisco-nexus-9348gc-fxp (environment) · cisco-nexus-9364c (environment) · cisco-nexus-9372px (environment) · cisco-nexus-9372px-e (environment) · cisco-nexus-9372tx (environment) · cisco-nexus-9372tx-e (environment) · cisco-nexus-9396px (environment) · cisco-nexus-9396tx (environment) · cisco-nexus-9504 (environment) · cisco-nexus-9508 (environment) · cisco-nexus-9516 (environment) · cisco-ucs-6248up (environment) · cisco-ucs-6296up (environment) · cisco-ucs-6324 (environment) · cisco-ucs-6332 (environment) · cisco-ucs-6332-16up (environment)

Firepower 4110 · Ciscodevice

80%

All versions

Firepower 4120 · Ciscodevice

80%

All versions

Firepower 4140 · Ciscodevice

80%

All versions

Firepower 4150 · Ciscodevice

80%

All versions