| CNNVD-ID编号 | CNNVD-201903-166 |
| CVE编号 | CVE-2019-1588 |
| 发布时间 | 2019-03-06 |
| 更新时间 | 2020-10-20 |
| 漏洞类型 | 输入验证错误 |
| 漏洞来源 | Nicolas Biscos and Ga?tan Ferry from Synacktiv .,Nicolas Biscos and Ga??tan Ferry from Synacktiv |
| 危险等级 | 中危 |
| 威胁类型 | 本地 |
| 厂 商 | N/A |
Cisco Nexus 9000 Series Fabric Switches（处于Application-Centric Infrastructure (ACI)模式）中的NX-OS Software存在输入验证漏洞，该漏洞源于对用户提交的输入程序缺少输入和验证检查机制。本地攻击者可利用该漏洞在受影响设备上读取任意文件。
目前厂商已发布升级了Cisco Nexus 9000 Series Fabric Switches 输入验证错误漏洞的补丁，Cisco Nexus 9000 Series Fabric Switches 输入验证错误漏洞的补丁获取链接：
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-aci-file-read
来源:Cisco Nexus 9000 Series Fabric Switches CVE-2019-1588 Arbitrary File Read VulnerabilityReferences: Cisco Homepage (Cisco )cisco-sa-20190306-aci-file-read: Cisco Nexus 9000 Series Fabric Switches Applica (Cisco)
链接：链接:无
来源:CISCO
来源:BID
来源:tools.cisco.com
来源:vigilance.fr
链接：https://vigilance.fr/vulnerability/Cisco-NX-OS-Nexus-multiple-vulnerabilities-28681
来源:nvd.nist.gov
来源:www.auscert.org.au
暂无