Security Experts:

Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Network Security

Cisco Patches Critical Vulnerability in Data Center Switches

Cisco has released patches for tens of vulnerabilities in its products, including a Critical flaw impacting Nexus 9000 switches.

Tracked as CVE-2019-1804 and featuring a CVSS score of 9.8, the issue was found in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure Mode Switch Software.

Cisco has released patches for tens of vulnerabilities in its products, including a Critical flaw impacting Nexus 9000 switches.

Tracked as CVE-2019-1804 and featuring a CVSS score of 9.8, the issue was found in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure Mode Switch Software.

The presence of a default SSH key pair in all devices could be exploited by an attacker by opening an SSH connection via IPv6 to a targeted device. The attacker would have access to the system with the privileges of the root user.

CVE-2019-1804 affects Cisco 9000 Series network switchesOnly Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode running a Cisco NX-OS Software release prior to 14.1(1i) are vulnerable, the company says

Cisco released a software update to address the issue and says that it is not aware of a workaround to mitigate the vulnerability. The company also says it is not aware of public exploitation of the vulnerability.

This week, Cisco also released patches for over 20 High severity vulnerabilities impacting the Web Security Appliance (WSA), Umbrella Dashboard, Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) software, RV320 and RV325 routers, IP Phone 7800 and 8800 Series, Application Policy Infrastructure Controller (APIC) software, and the Nexus 9000 switches. 

Exploitation of these vulnerabilities could allow attackers to escalate privileges, cause denial of service on the affected devices, hijack sessions, maintain access to a dashboard, bypass certificate authentication, establish a VPN session, or discover the private keys of an affected device. 

Additionally, over a dozen Medium risk flaws addressed this week could be exploited for cross-site scripting (XSS) and cross-site request forgery (CSRF) attacks, command injection, directory traversal, filtering functionality bypass, denial of service, or to access sensitive information. 

Additional information on these vulnerabilities and on the patches Cisco has released for them can be found on the company’s support website. 

Related: Cisco Patches Critical Flaw in ASR 9000 Routers

Related: Default Account in Cisco CSPC Allows Unauthorized Access

Related: Cisco Patches Critical Vulnerability in Wireless Routers

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this webinar to learn best practices that organizations can use to improve both their resilience to new threats and their response times to incidents.

Register

Join this live webinar as we explore the potential security threats that can arise when third parties are granted access to a sensitive data or systems.

Register

Expert Insights

Related Content

Vulnerabilities

Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...

Application Security

Drupal released updates that resolve four vulnerabilities in Drupal core and three plugins.

Risk Management

The supply chain threat is directly linked to attack surface management, but the supply chain must be known and understood before it can be...

Vulnerabilities

Apple has released updates for macOS, iOS and Safari and they all include a WebKit patch for a zero-day vulnerability tracked as CVE-2023-23529.

Network Security

NSA publishes guidance to help system administrators identify and mitigate cyber risks associated with transitioning to IPv6.

Cloud Security

VMware vRealize Log Insight vulnerability allows an unauthenticated attacker to take full control of a target system.

Cyberwarfare

Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...