// For flags

CVE-2019-1590

Cisco Nexus 9000 Series Fabric Switches Application Centric Infrastructure Mode Insecure Fabric Authentication Vulnerability

Severity Score

8.1
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

Track*
*SSVC
Descriptions

A vulnerability in the Transport Layer Security (TLS) certificate validation functionality of Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to perform insecure TLS client authentication on an affected device. The vulnerability is due to insufficient TLS client certificate validations for certificates sent between the various components of an ACI fabric. An attacker who has possession of a certificate that is trusted by the Cisco Manufacturing CA and the corresponding private key could exploit this vulnerability by presenting a valid certificate while attempting to connect to the targeted device. An exploit could allow the attacker to gain full control of all other components within the ACI fabric of an affected device.

Una vulnerabilidad en la funcionalidad de validación de certificados de Transport Layer Security (TLS) del software Nexus 9000 Series Switch de Cisco en modo Application Centric Infrastructure (ACI), podría permitir a un atacante remoto no autenticado realizar una autenticación no segura del cliente TLS en un dispositivo afectado. La vulnerabilidad es debido a que son insuficientes las validaciones de certificados del cliente TLS para los certificados enviados entre los distintos componentes de un ACI fabric. Un atacante que posea un certificado en el que confíe Cisco Manufacturing CA y la clave privada correspondiente podría explotar esta vulnerabilidad presentando un certificado válido mientras intenta conectarse al dispositivo de destino. Un exploit podría permitirle al atacante conseguir el control total de todos los demás componentes dentro del tejido ACI de un dispositivo afectado.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:Track*
Exploitation
None
Automatable
No
Tech. Impact
Total
* Organization's Worst-case Scenario
Timeline
  • 2018-12-06 CVE Reserved
  • 2019-05-03 CVE Published
  • 2023-03-07 EPSS Updated
  • 2024-11-20 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-295: Improper Certificate Validation
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9000
Search vendor "Cisco" for product "Nexus 9000"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 92160yc-x
Search vendor "Cisco" for product "Nexus 92160yc-x"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 92300yc
Search vendor "Cisco" for product "Nexus 92300yc"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 92304qc
Search vendor "Cisco" for product "Nexus 92304qc"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9236c
Search vendor "Cisco" for product "Nexus 9236c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9272q
Search vendor "Cisco" for product "Nexus 9272q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93108tc-ex
Search vendor "Cisco" for product "Nexus 93108tc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93108tc-fx
Search vendor "Cisco" for product "Nexus 93108tc-fx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93120tx
Search vendor "Cisco" for product "Nexus 93120tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93128tx
Search vendor "Cisco" for product "Nexus 93128tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180lc-ex
Search vendor "Cisco" for product "Nexus 93180lc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180yc-ex
Search vendor "Cisco" for product "Nexus 93180yc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180yc-fx
Search vendor "Cisco" for product "Nexus 93180yc-fx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93240yc-fx2
Search vendor "Cisco" for product "Nexus 93240yc-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9332c
Search vendor "Cisco" for product "Nexus 9332c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9332pq
Search vendor "Cisco" for product "Nexus 9332pq"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9336c-fx2
Search vendor "Cisco" for product "Nexus 9336c-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9336pq
Search vendor "Cisco" for product "Nexus 9336pq"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9348gc-fxp
Search vendor "Cisco" for product "Nexus 9348gc-fxp"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9364c
Search vendor "Cisco" for product "Nexus 9364c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372px
Search vendor "Cisco" for product "Nexus 9372px"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372px-e
Search vendor "Cisco" for product "Nexus 9372px-e"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372tx
Search vendor "Cisco" for product "Nexus 9372tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372tx-e
Search vendor "Cisco" for product "Nexus 9372tx-e"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9396px
Search vendor "Cisco" for product "Nexus 9396px"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9396tx
Search vendor "Cisco" for product "Nexus 9396tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
8.3\(0\)sk\(0.39\)
Search vendor "Cisco" for product "Nx-os" and version "8.3\(0\)sk\(0.39\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9508
Search vendor "Cisco" for product "Nexus 9508"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9000
Search vendor "Cisco" for product "Nexus 9000"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 92160yc-x
Search vendor "Cisco" for product "Nexus 92160yc-x"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 92300yc
Search vendor "Cisco" for product "Nexus 92300yc"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 92304qc
Search vendor "Cisco" for product "Nexus 92304qc"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9236c
Search vendor "Cisco" for product "Nexus 9236c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9272q
Search vendor "Cisco" for product "Nexus 9272q"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93108tc-ex
Search vendor "Cisco" for product "Nexus 93108tc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93108tc-fx
Search vendor "Cisco" for product "Nexus 93108tc-fx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93120tx
Search vendor "Cisco" for product "Nexus 93120tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93128tx
Search vendor "Cisco" for product "Nexus 93128tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180lc-ex
Search vendor "Cisco" for product "Nexus 93180lc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180yc-ex
Search vendor "Cisco" for product "Nexus 93180yc-ex"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93180yc-fx
Search vendor "Cisco" for product "Nexus 93180yc-fx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 93240yc-fx2
Search vendor "Cisco" for product "Nexus 93240yc-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9332c
Search vendor "Cisco" for product "Nexus 9332c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9332pq
Search vendor "Cisco" for product "Nexus 9332pq"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9336c-fx2
Search vendor "Cisco" for product "Nexus 9336c-fx2"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9336pq
Search vendor "Cisco" for product "Nexus 9336pq"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9348gc-fxp
Search vendor "Cisco" for product "Nexus 9348gc-fxp"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9364c
Search vendor "Cisco" for product "Nexus 9364c"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372px
Search vendor "Cisco" for product "Nexus 9372px"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372px-e
Search vendor "Cisco" for product "Nexus 9372px-e"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372tx
Search vendor "Cisco" for product "Nexus 9372tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9372tx-e
Search vendor "Cisco" for product "Nexus 9372tx-e"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9396px
Search vendor "Cisco" for product "Nexus 9396px"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9396tx
Search vendor "Cisco" for product "Nexus 9396tx"
--
Safe
Cisco
Search vendor "Cisco"
Nx-os
Search vendor "Cisco" for product "Nx-os"
14.1\(0.90\)
Search vendor "Cisco" for product "Nx-os" and version "14.1\(0.90\)"
-
Affected
in Cisco
Search vendor "Cisco"
Nexus 9508
Search vendor "Cisco" for product "Nexus 9508"
--
Safe