CVE-2019-12662
Description
A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper signature verification during the installation of an Open Virtual Appliance (OVA) image. An authenticated, local attacker could exploit this vulnerability and load a malicious, unsigned OVA image on an affected device. A successful exploit could allow an attacker to perform code execution on a crafted software OVA image.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco nx-os | 8.1\(0.2\)s0, 8.1\(1\), 8.1\(1\)s5, 8.1\(0\)bd\(0.20\) | — |
| cisco ios_xe | 16.8.1 | — |
| cisco nexus_3016_firmware | No range specified | — |
| cisco nexus_3048_firmware | No range specified | — |
| cisco nexus_3064_firmware | No range specified | — |
| cisco nexus_3064-t_firmware | No range specified | — |
| cisco nexus_31108pc-v_firmware | No range specified | — |
| cisco nexus_31108tc-v_firmware | No range specified | — |
| cisco nexus_31128pq_firmware | No range specified | — |
| cisco nexus_3132c-z_firmware | No range specified | — |
| cisco nexus_3132q_firmware | No range specified | — |
| cisco nexus_3132q-v_firmware | No range specified | — |
| cisco nexus_3132q-xl_firmware | No range specified | — |
| cisco nexus_3164q_firmware | No range specified | — |
| cisco nexus_3172_firmware | No range specified | — |
| cisco nexus_3172pq-xl_firmware | No range specified | — |
| cisco nexus_3172tq_firmware | No range specified | — |
| cisco nexus_3172tq-32t_firmware | No range specified | — |
| cisco nexus_3172tq-xl_firmware | No range specified | — |
| cisco nexus_3232c_firmware | No range specified | — |
| cisco nexus_3264c-e_firmware | No range specified | — |
| cisco nexus_3264q_firmware | No range specified | — |
| cisco nexus_3408-s_firmware | No range specified | — |
| cisco nexus_34180yc_firmware | No range specified | — |
| cisco nexus_34200yc-sm_firmware | No range specified | — |
| cisco nexus_3432d-s_firmware | No range specified | — |
| cisco nexus_3464c_firmware | No range specified | — |
| cisco nexus_3524_firmware | No range specified | — |
| cisco nexus_3524-x_firmware | No range specified | — |
| cisco nexus_3524-xl_firmware | No range specified | — |
| cisco nexus_3548_firmware | No range specified | — |
| cisco nexus_3548-x_firmware | No range specified | — |
| cisco nexus_3548-xl_firmware | No range specified | — |
| cisco nexus_5548p_firmware | No range specified | — |
| cisco nexus_5548up_firmware | No range specified | — |
| cisco nexus_5596t_firmware | No range specified | — |
| cisco nexus_5596up_firmware | No range specified | — |
| cisco nexus_56128p_firmware | No range specified | — |
| cisco nexus_5624q_firmware | No range specified | — |
| cisco nexus_5648q_firmware | No range specified | — |
| cisco nexus_5672up_firmware | No range specified | — |
| cisco nexus_5696q_firmware | No range specified | — |
| cisco nexus_6001_firmware | No range specified | — |
| cisco nexus_6004_firmware | No range specified | — |
| cisco nexus_7000_10-slot_firmware | No range specified | — |
| cisco nexus_7000_18-slot_firmware | No range specified | — |
| cisco nexus_7000_4-slot_firmware | No range specified | — |
| cisco nexus_7000_9-slot_firmware | No range specified | — |
| cisco nexus_7700_10-slot_firmware | No range specified | — |
| cisco nexus_7700_18-slot_firmware | No range specified | — |
| cisco nexus_7700_2-slot_firmware | No range specified | — |
| cisco nexus_7700_6-slot_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.