CVE-2019-1968

A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to cause an NX-API system process to unexpectedly restart. The vulnerability is due to incorrect validation of the HTTP header of a request that is sent to the NX-API. An attacker could exploit this vulnerability by sending a crafted HTTP request to the NX-API on an affected device. A successful exploit could allow the attacker to cause a denial of service (DoS) condition in the NX-API service; however, the NX-OS device itself would still be available and passing network traffic. Note: The NX-API feature is disabled by default.

• CWE-20
• CWE-116

• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-api-dosVendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190828-nxos-api-dosVendor Advisory

Published

Aug 30, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19670A HTTP Response Splitting vulnerability was identified in th…6.1
• CVE-2019-19675In Ivanti Workspace Control before 10.3.180.0. a locally aut…7.8
• CVE-2019-19676A CSV injection in arxes-tolina 3.0.0 allows malicious users…9.6
• CVE-2019-19677arxes-tolina 3.0.0 allows User Enumeration.4.3
• CVE-2019-19678In "Xray Test Management for Jira" prior to version 3.5.5, r…5.4
• CVE-2019-19679In "Xray Test Management for Jira" prior to version 3.5.5, r…5.4
• CVE-2019-19680A file-extension filtering vulnerability in Proofpoint Enter…8.8
• CVE-2019-19681Pandora FMS 7.x suffers from remote code execution vulnerabi…8.8
• CVE-2019-19682nopCommerce through 4.20 allows XSS in the SaveStoreMappings…4.8
• CVE-2019-19683RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerab…9.1
• CVE-2019-19684nopCommerce v4.2.0 allows privilege escalation via file uplo…8.8
• CVE-2019-19685RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerab…8.8