CVE-2019-1804
Description
A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of a default SSH key pair that is present in all devices. An attacker could exploit this vulnerability by opening an SSH connection via IPv6 to a targeted device using the extracted key materials. An exploit could allow the attacker to access the system with the privileges of the root user. This vulnerability is only exploitable over IPv6; IPv4 is not vulnerable.
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco nexus_9332pq_firmware | 14.0\(3d\) | — |
| cisco nexus_93180yc-ex_firmware | 14.0\(3d\) | — |
| cisco nexus_93128tx_firmware | 14.0\(3d\) | — |
| cisco nexus_93120tx_firmware | 14.0\(3d\) | — |
| cisco nexus_93108tc-ex_firmware | 14.0\(3d\) | — |
| cisco nexus_9516_firmware | 14.0\(3d\) | — |
| cisco nexus_9508_firmware | 14.0\(3d\) | — |
| cisco nexus_9504_firmware | 14.0\(3d\) | — |
| cisco nexus_9500_firmware | 14.0\(3d\) | — |
| cisco nexus_9396tx_firmware | 14.0\(3d\) | — |
| cisco nexus_9396px_firmware | 14.0\(3d\) | — |
| cisco nexus_9372tx_firmware | 14.0\(3d\) | — |
| cisco nexus_9372px_firmware | 14.0\(3d\) | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.