====================================================================

                             CERT-Renater

                 Note d'Information No. 2019/VULN117

_____________________________________________________________________

DATE                : 02/05/2019

HARDWARE PLATFORM(S): Cisco Nexus 9000 Series Fabric Switches.

OPERATING SYSTEM(S): Cisco NX-OS Software.

=====================================================================
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-sshkey
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-rpe
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabric
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-hw-clock-util
_____________________________________________________________________

Cisco Nexus 9000 Series Fabric Switches Application Centric
Infrastructure Mode Default SSH Key Vulnerability

CVE-2019-1804

SIR: Critical

CVSS Score v(3.0): 9.8

URL:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-sshkey
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-sshkey"]

_____________________________________________________________________

Cisco Nexus 9000 Series Fabric Switches Application Centric
Infrastructure Mode Root Privilege Escalation Vulnerability

CVE-2019-1803

SIR: High

CVSS Score v(3.0): 7.8

URL:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-rpe
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-nexus9k-rpe"]

_____________________________________________________________________

Cisco Nexus 9000 Series Fabric Switches Application Centric
Infrastructure Mode Insecure Fabric Authentication Vulnerability

CVE-2019-1590

SIR: High

CVSS Score v(3.0): 8.1

URL:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabric
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-insecure-fabric"]

_____________________________________________________________________

Cisco Nexus 9000 Series Fabric Switches Application Centric
Infrastructure Mode Privilege Escalation Vulnerability

CVE-2019-1592

SIR: High

CVSS Score v(3.0): 7.8

URL:
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-hw-clock-util
["https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190501-aci-hw-clock-util"]


=========================================================
+ CERT-RENATER        | tel : 01-53-94-20-44            +
+ 23/25 Rue Daviel    | fax : 01-53-94-20-41            +
+ 75013 Paris         | email:cert@support.renater.fr   +
=========================================================