What is the CVSS score of CVE-2019-1804?

CVE-2019-1804 has a CVSS 3.1 base score of 9.8 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 3.5%.

Nexus 9332Pq Firmware CVE-2019-1804

CRITICAL

Cryptographic Issues (CWE-310)

2019-05-03 psirt@cisco.com

Cisco Information Disclosure Nexus 9332Pq Firmware Nexus 93180Yc Ex Firmware Nexus 93128Tx Firmware Nexus 93120Tx Firmware Nexus 93108Tc Ex Firmware Nexus 9516 Firmware Nexus 9508 Firmware Nexus 9504 Firmware Nexus 9500 Firmware Nexus 9396Tx Firmware Nexus 9396Px Firmware Nexus 9372Tx Firmware Nexus 9372Px Firmware

9.8

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

CVE Published

May 03, 2019 - 17:29 nvd

CRITICAL 9.8

DescriptionNVD

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of a default SSH key pair that is present in all devices. An attacker could exploit this vulnerability by opening an SSH connection via IPv6 to a targeted device using the extracted key materials. An exploit could allow the attacker to access the system with the privileges of the root user. This vulnerability is only exploitable over IPv6; IPv4 is not vulnerable.

AnalysisAI

A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-310. A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of a default SSH key pair that is present in all devices. An attacker could exploit this vulnerability by opening an SSH connection via IPv6 to a targeted device using the extracted key materials. An exploit could allow the attacker to access the system with the privileges of the root user. This vulnerability is only exploitable over IPv6; IPv4 is not vulnerable. Affected products include: Cisco Nexus 9332Pq Firmware, Cisco Nexus 93180Yc-Ex Firmware, Cisco Nexus 93128Tx Firmware, Cisco Nexus 93120Tx Firmware, Cisco Nexus 93108Tc-Ex Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.