Description
A vulnerability in the SSH key management for the Cisco Nexus 9000 Series Application Centric Infrastructure (ACI) Mode Switch Software could allow an unauthenticated, remote attacker to connect to the affected system with the privileges of the root user. The vulnerability is due to the presence of a default SSH key pair that is present in all devices. An attacker could exploit this vulnerability by opening an SSH connection via IPv6 to a targeted device using the extracted key materials. An exploit could allow the attacker to access the system with the privileges of the root user. This vulnerability is only exploitable over IPv6; IPv4 is not vulnerable.
Scores
CVSS v3
9.8
EPSS
0.0410
EPSS Percentile
88.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
total
Details
CWE
CWE-310
CWE-1188
Status
published
Products (13)
cisco/nexus_93108tc-ex_firmware
14.0\(3d\)
cisco/nexus_93120tx_firmware
14.0\(3d\)
cisco/nexus_93128tx_firmware
14.0\(3d\)
cisco/nexus_93180yc-ex_firmware
14.0\(3d\)
cisco/nexus_9332pq_firmware
14.0\(3d\)
cisco/nexus_9372px_firmware
14.0\(3d\)
cisco/nexus_9372tx_firmware
14.0\(3d\)
cisco/nexus_9396px_firmware
14.0\(3d\)
cisco/nexus_9396tx_firmware
14.0\(3d\)
cisco/nexus_9500_firmware
14.0\(3d\)
... and 3 more
Published
May 03, 2019
Tracked Since
Feb 18, 2026