VDB
CVE-2019-12662
CVE-2019-12662
PUBLISHED
CVSS 6.699999809265137 MEDIUM
A vulnerability in Cisco NX-OS Software and Cisco IOS XE Software could allow an authenticated, local attacker with valid administrator or privilege level 15 credentials to load a virtual service image and bypass signature verification on an affected device. The vulnerability is due to improper signature verification during the installation of an Open Virtual Appliance (OVA) image. An authenticated, local attacker could exploit this vulnerability and load a malicious, unsigned OVA image on an affected device. A successful exploit could allow an attacker to perform code execution on a crafted software OVA image.
EPSS 0.03% · 10.0th percentile
Risk Scores
CVSS 3.0
6.699999809265137
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.03%
10.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| cisco | nexus_5624q_firmware | |
| cisco | nexus_31108pc-v_firmware | |
| cisco | nexus_3172tq_firmware | |
| cisco | nexus_3432d-s_firmware | |
| cisco | nexus_3548-xl_firmware | |
| cisco | nexus_3524_firmware | |
| cisco | nexus_6004_firmware | |
| cisco | nexus_3132q-v_firmware | |
| cisco | nexus_7000_18-slot_firmware | |
| cisco | nexus_3264q_firmware | |
| cisco | nexus_3172_firmware | |
| cisco | nexus_7700_6-slot_firmware | |
| cisco | nexus_7000_10-slot_firmware | |
| cisco | nexus_3408-s_firmware | |
| cisco | nexus_5696q_firmware | |
| cisco | nexus_6001_firmware | |
| cisco | nexus_3048_firmware | |
| cisco | nexus_3172pq-xl_firmware | |
| cisco | nexus_34200yc-sm_firmware | |
| cisco | nexus_5596up_firmware |
…and 33 more
Exploit Intelligence
Timeline
- Sep 25, 2019 CVE Published
- Apr 14, 2021 EPSS Score
- Jun 23, 2021 EPSS Score
- Aug 24, 2021 EPSS Score
- Oct 26, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Feb 28, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 1, 2022 EPSS Score
- Jul 3, 2022 EPSS Score
- Sep 4, 2022 EPSS Score