CVE-2019-1602— Cisco NX-OS Software Privilege Escalation Vulnerability
Quick assessment
Affected
Cisco Nexus 3000 Series Switches
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Cisco NX-OS Software是美国思科（Cisco）公司的一套交换机使用的数据中心级操作系统软件。 Cisco NX-OS Software中的文件系统权限存在权限许可和访问控制漏洞，该漏洞源于程序错误地实现了文件系统权限。本地攻击者可利用该漏洞访问敏感信息，进而将权限提升至管理员权限。以下产品和版本受到影响：Cisco Nexus 3000 Series Switches 7.0(3)I7(4)之前版本；Nexus 3500 Platform Switches 7.0(3)I7(4)之前版本
Possible ATT&CK Techniques 3 AI
T1548.003 · Sudo and Sudo Caching T1550 · Use Alternate Authentication Material T1548 · Abuse Elevation Control Mechanism
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-1602
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cisco NX-OS Software Privilege Escalation Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability in the filesystem permissions of Cisco NX-OS Software could allow an authenticated, local attacker to access sensitive data that could be used to elevate their privileges to administrator. The vulnerability is due to improper implementation of filesystem permissions. An attacker could exploit this vulnerability by logging in to the CLI of an affected device, accessing a specific file, and leveraging this information to authenticate to the NX-API server. A successful exploit could allow an attacker to make configuration changes as administrator. Note: NX-API is disabled by default. Nexus 3000 Series Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3500 Platform Switches are affected in versions prior to 7.0(3)I7(4). Nexus 3600 Platform Switches are affected in versions prior to 7.0(3)F3(5). Nexus 9000 Series Switches-Standalone are affected in versions prior to 7.0(3)I7(4). Nexus 9500 R-Series Line Cards and Fabric Modules are affected in versions prior to 7.0(3)F3(5).
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
权限、特权和访问控制
Source: CVE Program / CVE List V5
Vulnerability Title
Cisco NX-OS Software 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Cisco NX-OS Software是美国思科（Cisco）公司的一套交换机使用的数据中心级操作系统软件。 Cisco NX-OS Software中的文件系统权限存在权限许可和访问控制漏洞，该漏洞源于程序错误地实现了文件系统权限。本地攻击者可利用该漏洞访问敏感信息，进而将权限提升至管理员权限。以下产品和版本受到影响：Cisco Nexus 3000 Series Switches 7.0(3)I7(4)之前版本；Nexus 3500 Platform Switches 7.0(3)I7(4)之前版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Cisco | Nexus 3000 Series Switches | unspecified ~ 7.0(3)I7(4) | - |
|
| Cisco | Nexus 3500 Platform Switches | unspecified ~ 7.0(3)I7(4) | - |
|
| Cisco | Nexus 3600 Platform Switches | unspecified ~ 7.0(3)F3(5) | - |
|
| Cisco | Nexus 9000 Series Switches-Standalone | unspecified ~ 7.0(3)I7(4) | - |
|
| Cisco | Nexus 9500 R-Series Line Cards and Fabric Modules | unspecified ~ 7.0(3)F3(5) | - |
|
II. Public POCs for CVE-2019-1602
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-1602
请登录查看更多情报信息。
Vendor Advisories for CVE-2019-1602 (2)
-
-
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-escalation vendor-advisory x_refsource_CISCO
Same Patch Batch · Cisco · 2019-03-08 · 9 CVEs total
| CVE-2019-1605 | Cisco NX-OS Software NX-API Arbitrary Code Execution Vulnerability | |
| CVE-2019-1606 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1606) | |
| CVE-2019-1607 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1607) | |
| CVE-2019-1608 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1608) | |
| CVE-2019-1609 | Cisco NX-OS Software CLI Command Injection Vulnerability (CVE-2019-1609) | |
| CVE-2019-1603 | Cisco NX-OS Software Privilege Escalation Vulnerability | |
| CVE-2019-1604 | Cisco NX-OS Software Privilege Escalation Vulnerability | |
| CVE-2019-1601 | Cisco NX-OS Software Unauthorized Filesystem Access Vulnerability |
IV. Related Vulnerabilities
Same product: Nexus 3000 Series Switches
-
CVE-2019-1612
Cisco NX-OS Software CLI Command Injection Vulnerability (CV -
CVE-2019-1615
Cisco NX-OS Software Image Signature Verification Vulnerabil -
CVE-2019-1603
Cisco NX-OS Software Privilege Escalation Vulnerability -
CVE-2019-1596
Cisco NX-OS Software Bash Shell Privilege Escalation Vulnera -
CVE-2019-1593
Cisco NX-OS Software Bash Shell Role-Based Access Control By
Same vendor: Cisco
-
CVE-2026-76504
Cisco Catalyst SD-WAN Manager System Account Authorization B -
CVE-2026-76426
Cisco ISE REST API SQL Injection Vulnerability -
CVE-2026-20121
CIsco FTD Bypass Access List -
CVE-2026-76431
Cisco Identity Services Engine Arbitrary File Deletion Vulne -
CVE-2026-76427
Cisco ISE XML External Entity Injection Vulnerability
V. Comments for CVE-2019-1602
No comments yet