CVE-2019-1611

A vulnerability in the CLI of Cisco NX-OS Software and Cisco FXOS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker could exploit this vulnerability by including malicious input as the argument of an affected command. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with elevated privileges. An attacker would need valid administrator credentials to exploit this vulnerability. Firepower 4100 Series Next-Generation Firewalls are affected running software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222. Firepower 9300 Security Appliance are affected running software versions prior to 2.2.2.91, 2.3.1.110, and 2.4.1.222. MDS 9000 Series Multilayer Switches are affected running software versions prior to 6.2(25) and 8.3(1). Nexus 3000 Series Switches are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(5). Nexus 3500 Platform Switches are affected running software versions prior to 7.0(3)I7(5). Nexus 3600 Platform Switches are affected running software versions prior to 7.0(3)F3(5). Nexus 2000, 5500, 5600, and 6000 Series Switches are affected running software versions prior to 7.1(5)N1(1b) and 7.3(4)N1(1). Nexus 7000 and 7700 Series Switches are affected running software versions prior to 6.2(22), 7.3(3)D1(1), 8.2(3). Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I4(9) and 7.0(3)I7(5). Nexus 9500 R-Series Line Cards and Fabric Modules are affected running software versions prior to 7.0(3)F3(5).

• CWE-77
• CWE-88

• http://www.securityfocus.com/bid/107381Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1611Vendor Advisory
• http://www.securityfocus.com/bid/107381Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190306-nxos-cmdinj-1611Vendor Advisory

Published

Mar 11, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16104Silver Peak EdgeConnect SD-WAN before 8.1.7.x has reflected …6.1
• CVE-2019-16105Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f d…
• CVE-2019-16106The Recruitment module in Humanica Humatrix 7 1.0.0.203 and …7.5
• CVE-2019-16107Missing form token validation in phpBB 3.2.7 allows CSRF in …4.3
• CVE-2019-16108phpBB 3.2.7 allows adding an arbitrary Cascading Style Sheet…7.5
• CVE-2019-16109An issue was discovered in Plataformatec Devise before 4.7.1…5.3
• CVE-2019-16110The network protocol of Blade Shadow though 2.13.3 allows re…8.1
• CVE-2019-16112TylerTech Eagle 2018.3.11 deserializes untrusted user input,…8.8
• CVE-2019-16113Bludit 3.9.2 allows remote code execution via bl-kernel/ajax…8.8
• CVE-2019-16114In ATutor 2.2.4, an unauthenticated attacker can change the …9.8
• CVE-2019-16115In Xpdf 4.01.01, a stack-based buffer under-read could be tr…7.8
• CVE-2019-16116EnterpriseDT CompleteFTP Server prior to version 12.1.3 is v…4.3