CVE:CVE-2019-1605
CNNVD:CNNVD-201903-172
Cisco Nexus 9500 R-Series Line Cards and Fabric Modules等都是美国思科（Cisco）公司的产品。Cisco Nexus 9500 R-Series Line Cards and Fabric Modules是一款9500R系列线卡模块。Cisco Nexus 7000 Series Switches是一款7000系列交换机。Cisco Nexus 7700 Series Switches是一款7700系列交换机。Cisco NX-OS Software是一套交换机使用的数据中心级操作系统软件。
Cisco NX-OS Software中的NX-API功能存在输入验证漏洞。本地攻击者可通过发送特制的HTTP或HTTPS请求利用该漏洞造成缓冲区溢出并以root用户身份执行任意代码。以下产品和版本受到影响：Cisco MDS 9000 Series Multilayer Switches 8.1(1)之前版本；Nexus 3000 Series Switches 7.0(3)I4(8)之前版本，7.0(3)I7(1)之前版本；Nexus 3500 Platform Switches 6.0(2)A8(8)之前版本；Nexus 3600 Platform Switches 7.0(3)F3(5)之前版本；Nexus 2000 Series Switches 7.3(2)N1(1)之前版本；Nexus 5500 Series Switches 7.3(2)N1(1)之前版本；Nexus 5600 Series Switches 7.3(2)N1(1)之前版本；Nexus 6000 Series Switches 7.3(2)N1(1)之前版本；Nexus 7000 Series Switches 7.3(3)D1(1)之前版本；Nexus 7700 Series Switches 7.3(3)D1(1)之前版本；Nexus 9000 Series Switches in Standalone NX-OS Mode 7.0(3)I4(8)之前版本，7.0(3)I7(1)之前版本；Nexus 9500 R-Series Line Cards and Fabric Modules 7.0(3)F3(5)之前版本。
solution:Upgrade cisco nx-os to a higher version than 8.1\(1\,6.0\(2\a8\(8\,7.0\(3\i7\(1\,7.0\(3\f3\(5\,7.3\(3\d1\(1\,7.0\(3\i4\(8\,7.0\(3\f3\(5\,7.3\(2\n1\(1\,and avoid the version [7.3,8.1\(1\)),(,6.0\(2\)a8\(8\)),[7.0\(3\)i5,7.0\(3\)i7\(1\)),[7.0\(3\)f3,7.0\(3\)f3\(5\)),[7.2,7.3\(3\)d1\(1\)),(,7.0\(3\)i4\(8\)),[7.0\(3\)f1,7.0\(3\)f3\(5\)),[7.3,7.3\(2\)n1\(1\))