CVE编号
CVE-2019-1594利用情况
暂无补丁情况
N/A披露时间
2019-03-07漏洞描述
Cisco Nexus 3000 Series Switches等都是美国思科（Cisco）公司的产品。Cisco Nexus 3000 Series Switches是一款3000系列交换机。Cisco Nexus 3500 Platform Switches是一款3500系列平台交换机。Cisco Nexus 9000 Series Switches是一款9000系列交换机。Cisco NX-OS Software是一套交换机使用的数据中心级操作系统软件。 Cisco NX-OS Software中的802.1X实现存在权限许可和访问控制漏洞，该漏洞源于程序没有执行完整的输入验证机制。攻击者可利用该漏洞造成设备重启，导致拒绝服务。以下产品和版本受到影响：Cisco Nexus 1000V Switch for VMware vSphere 5.2(1)SV3(1.4b)之前版本；Nexus 3000 Series Switches 7.0(3)I7(4)之前版本；Nexus 3500 Platform Switches 7.0(3)I7(4)之前版本；Nexus 2000 Series Switches 7.3(5)N1(1)之前版本，7.1(5)N1(1b)之前版本；Nexus 5500 Series Switches 7.3(5)N1(1)之前版本，7.1(5)N1(1b)之前版本；Nexus 5600 Series Switches 7.3(5)N1(1)之前版本，7.1(5)N1(1b)之前版本；Nexus 6000 Series Switches 7.3(5)N1(1)之前版本，7.1(5)N1(1b)之前版本；Nexus 7000 Series Switches 8.2(3)之前版本；Nexus 7700 Series Switches 8.2(3)之前版本；Nexus 9000 Series Fabric Switches in ACI Mode 13.2(1l)之前版本；Nexus 9000 Series Switches in Standalone NX-OS Mode 7.0(3)I7(4)之前版本。解决建议
厂商已发布漏洞修复程序，请及时关注更新：https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nx-os-lan-auth
参考链接 |
|
|---|---|
| http://www.securityfocus.com/bid/107325 | |
| https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.11 | ffmpeg | * |
Up to (excluding) 0.20.0-r0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.12 | ffmpeg | * |
Up to (excluding) 4.2.1-r0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_3.13 | ffmpeg | * |
Up to (excluding) 4.2.1-r0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | alpine_edge | ffmpeg | * |
Up to (excluding) 4.2.1-r0 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | centos_8 | opensc | * |
Up to (excluding) 0.20.0-2.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
Up to (excluding) 13.2\(1l\) |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
Up to (excluding) 5.2\(1\)sv3\(1.4b\) |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
Up to (excluding) 7.1\(5\)n1\(1b\) |
|||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
From (including) 6.2 |
Up to (excluding) 6.2\(20a\) |
||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
From (including) 7.0\(3\)i7 |
Up to (excluding) 7.0\(3\)i7\(4\) |
||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
From (including) 7.2 |
Up to (excluding) 7.3\(3\)d1\(1\) |
||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
From (including) 7.2 |
Up to (excluding) 7.3\(5\)n1\(1\) |
||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
From (including) 8.0 |
Up to (excluding) 8.2\(3\) |
||||
| 运行在以下环境 | |||||||||
| 系统 | cisco | nx-os | * |
From (including) 8.3 |
Up to (excluding) 8.3\(1\) |
||||
| 运行在以下环境 | |||||||||
| 系统 | debian_10 | ffmpeg | * |
Up to (excluding) 2.0.2+ds-7+deb10u2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian_8 | ffmpeg | * |
Up to (excluding) 0.16.0-3+deb8u1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | debian_9 | ffmpeg | * |
Up to (excluding) 1.9.7-3+deb9u2 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_31 | ffmpeg | * |
Up to (excluding) 0.20.0-3.fc31 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.1 | ffmpeg | * |
Up to (excluding) 4.0.5-17.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.2 | ffmpeg | * |
Up to (excluding) 0.19.0-lp152.3.3.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle linux_8 | ffmpeg | * |
Up to (excluding) 0.20.0-2.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_8 | opensc | * |
Up to (excluding) 0.20.0-2.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | redhat_8 | opensc | * |
Up to (excluding) 0.20.0-2.el8 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | sles_12_SP5 | ffmpeg | * |
Up to (excluding) 0.13.0-3.11.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | suse_12_SP5 | opensc | * |
Up to (excluding) 0.13.0-3.11.1 |
|||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_1000v | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_2000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_3000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_3500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_5500 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_5600 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_6000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_7000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_7700 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_9000 | - | - | |||||
| 运行在以下环境 | |||||||||
| 硬件 | cisco | nexus_9000_in_standalone_nx-os_mode | - | - | |||||
- 攻击路径 相邻
- 攻击复杂度 低
- 权限要求 无
- 影响范围 已更改
- 用户交互 无
- 可用性 高
- 保密性 无
- 完整性 无
还没有评论，来说两句吧...