CVE-2019-12662 : A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an

A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper signature verification during the installation of an Open Virtual Appliance (OVA) image. An authenticated, local attacker could exploit this vulnerability and load a malicious, unsigned OVA image on an affected device. A successful exploit could allow an attacker to perform code execution on a crafted software OVA image.

Published 2019-09-25 21:15:11

Updated 2019-10-09 23:46:00

Source Cisco Systems, Inc.

View at NVD, CVE.org

Products affected by CVE-2019-12662

Cisco » Ios Xe » Version: 16.8.1
cpe:2.3:o:cisco:ios_xe:16.8.1:*:*:*:*:*:*:*
Matching versions
Cisco » Nx-os » Version: 8.1(1)
cpe:2.3:o:cisco:nx-os:8.1\(1\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Mds 9000 » Version: N/A
Cisco » Nx-os » Version: 8.1(0)bd(0.20)
cpe:2.3:o:cisco:nx-os:8.1\(0\)bd\(0.20\):*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 9000v » Version: N/A
When used together with: Cisco » Nexus 92160yc-x » Version: N/A
When used together with: Cisco » Nexus 92300yc » Version: N/A
When used together with: Cisco » Nexus 92304qc » Version: N/A
When used together with: Cisco » Nexus 92348gc-x » Version: N/A
When used together with: Cisco » Nexus 9236c » Version: N/A
When used together with: Cisco » Nexus 9272q » Version: N/A
When used together with: Cisco » Nexus 93108tc-ex » Version: N/A
When used together with: Cisco » Nexus 93108tc-fx » Version: N/A
When used together with: Cisco » Nexus 93120tx » Version: N/A
When used together with: Cisco » Nexus 93128tx » Version: N/A
When used together with: Cisco » Nexus 93180lc-ex » Version: N/A
When used together with: Cisco » Nexus 93180yc-ex » Version: N/A
When used together with: Cisco » Nexus 93180yc-fx » Version: N/A
When used together with: Cisco » Nexus 93216tc-fx2 » Version: N/A
When used together with: Cisco » Nexus 93240yc-fx2 » Version: N/A
When used together with: Cisco » Nexus 9332c » Version: N/A
When used together with: Cisco » Nexus 9332pq » Version: N/A
When used together with: Cisco » Nexus 93360yc-fx2 » Version: N/A
When used together with: Cisco » Nexus 9336c-fx2 » Version: N/A
When used together with: Cisco » Nexus 9336pq Aci Spine » Version: N/A
When used together with: Cisco » Nexus 9348gc-fxp » Version: N/A
When used together with: Cisco » Nexus 9364c » Version: N/A
When used together with: Cisco » Nexus 9372px » Version: N/A
When used together with: Cisco » Nexus 9372px-e » Version: N/A
When used together with: Cisco » Nexus 9372tx » Version: N/A
When used together with: Cisco » Nexus 9372tx-e » Version: N/A
When used together with: Cisco » Nexus 9396px » Version: N/A
When used together with: Cisco » Nexus 9396tx » Version: N/A
When used together with: Cisco » Nexus 9504 » Version: N/A
When used together with: Cisco » Nexus 9508 » Version: N/A
When used together with: Cisco » Nexus 9516 » Version: N/A
Cisco » Nx-os » Version: 8.1(1)s5
cpe:2.3:o:cisco:nx-os:8.1\(1\)s5:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Mds 9000 » Version: N/A
Cisco » Nx-os » Version: 8.1(0.2)s0
cpe:2.3:o:cisco:nx-os:8.1\(0.2\)s0:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Mds 9000 » Version: N/A
Cisco » Nexus 3016 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3016_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3016 » Version: N/A
Cisco » Nexus 3048 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3048_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3048 » Version: N/A
Cisco » Nexus 3064 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3064_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3064 » Version: N/A
Cisco » Nexus 3064-t Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3064-t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3064-t » Version: N/A
Cisco » Nexus 31108pc-v Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_31108pc-v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 31108pc-v » Version: N/A
Cisco » Nexus 31108tc-v Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_31108tc-v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 31108tc-v » Version: N/A
Cisco » Nexus 31128pq Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_31128pq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 31128pq » Version: N/A
Cisco » Nexus 3132c-z Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3132c-z_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3132c-z » Version: N/A
Cisco » Nexus 3132q Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3132q_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3132q » Version: N/A
Cisco » Nexus 3132q-v Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3132q-v_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3132q-v » Version: N/A
Cisco » Nexus 3132q-xl Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3132q-xl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3132q-xl » Version: N/A
Cisco » Nexus 3164q Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3164q_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3164q » Version: N/A
Cisco » Nexus 3172 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3172_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3172 » Version: N/A
Cisco » Nexus 3172pq-xl Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3172pq-xl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3172pq-xl » Version: N/A
Cisco » Nexus 3172tq Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3172tq_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3172tq » Version: N/A
Cisco » Nexus 3172tq-32t Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3172tq-32t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3172tq-32t » Version: N/A
Cisco » Nexus 3172tq-xl Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3172tq-xl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3172tq-xl » Version: N/A
Cisco » Nexus 3232c Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3232c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3232c » Version: N/A
Cisco » Nexus 3264c-e Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3264c-e_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3264c-e » Version: N/A
Cisco » Nexus 3264q Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3264q_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3264q » Version: N/A
Cisco » Nexus 3408-s Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3408-s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3408-s » Version: N/A
Cisco » Nexus 34180yc Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_34180yc_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 34180yc » Version: N/A
Cisco » Nexus 34200yc-sm Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_34200yc-sm_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 34200yc-sm » Version: N/A
Cisco » Nexus 3432d-s Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3432d-s_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3432d-s » Version: N/A
Cisco » Nexus 3464c Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3464c_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3464c » Version: N/A
Cisco » Nexus 3524 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3524_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3524 » Version: N/A
Cisco » Nexus 3524-x Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3524-x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3524-x » Version: N/A
Cisco » Nexus 3524-xl Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3524-xl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3524-xl » Version: N/A
Cisco » Nexus 3548 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3548_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3548 » Version: N/A
Cisco » Nexus 3548-x Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3548-x_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3548-x » Version: N/A
Cisco » Nexus 3548-xl Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_3548-xl_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 3548-xl » Version: N/A
Cisco » Nexus 5548p Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5548p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5548p » Version: N/A
Cisco » Nexus 5548up Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5548up_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5548up » Version: N/A
Cisco » Nexus 5596t Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5596t_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5596t » Version: N/A
Cisco » Nexus 5596up Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5596up_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5596up » Version: N/A
Cisco » Nexus 56128p Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_56128p_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 56128p » Version: N/A
Cisco » Nexus 5624q Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5624q_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5624q » Version: N/A
Cisco » Nexus 5648q Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5648q_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5648q » Version: N/A
Cisco » Nexus 5672up Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5672up_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5672up » Version: N/A
Cisco » Nexus 5696q Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_5696q_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 5696q » Version: N/A
Cisco » Nexus 6001 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_6001_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 6001 » Version: N/A
Cisco » Nexus 6004 Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_6004_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 6004 » Version: N/A
Cisco » Nexus 7000 10-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7000_10-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7000 10-slot » Version: N/A
Cisco » Nexus 7000 18-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7000_18-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7000 18-slot » Version: N/A
Cisco » Nexus 7000 4-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7000_4-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7000 4-slot » Version: N/A
Cisco » Nexus 7000 9-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7000_9-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7000 9-slot » Version: N/A
Cisco » Nexus 7700 10-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7700_10-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7700 10-slot » Version: N/A
Cisco » Nexus 7700 18-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7700_18-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7700 18-slot » Version: N/A
Cisco » Nexus 7700 2-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7700_2-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7700 2-slot » Version: N/A
Cisco » Nexus 7700 6-slot Firmware » Version: N/A
cpe:2.3:o:cisco:nexus_7700_6-slot_firmware:-:*:*:*:*:*:*:*
Matching versions
When used together with: Cisco » Nexus 7700 6-slot » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-12662

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 6 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-12662

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.2	HIGH	AV:L/AC:L/Au:N/C:C/I:C/A:C	3.9	10.0	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
6.7	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	Cisco Systems, Inc.
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
6.7	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H	0.8	5.9	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: High User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2019-12662

CWE-347 Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.
Assigned by:
- nvd@nist.gov (Primary)
- ykramarz@cisco.com (Secondary)

References for CVE-2019-12662

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190925-vman

Cisco NX-OS and IOS XE Software Virtual Service Image Signature Bypass Vulnerability
Vendor Advisory

Jump to

Vulnerability Details : CVE-2019-12662

Products affected by CVE-2019-12662

Exploit prediction scoring system (EPSS) score for CVE-2019-12662

CVSS scores for CVE-2019-12662

CWE ids for CVE-2019-12662

References for CVE-2019-12662