Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Arbitrary File Read Vulnerability

This vulnerability affects Cisco Nexus 9000 Series Fabric Switches in ACI mode when they are running an affected release of Cisco NX-OS Software.

For information about affected software releases, consult the Cisco bug ID(s) at the top of this advisory.

Determining the Cisco NX-OS Software Release

Administrators can determine the release of Cisco NX-OS Software running on a device by using the show version command in the device CLI. The following example identifies the 11.2(2) Release:

nxos-n9k-aci# show version Cisco Nexus Operating System (NX-OS) Software such license is available at http://www.opensource.org/licenses/gpl-2.0.php and http://www.opensource.org/licenses/lgpl-2.1.php Software BIOS: version N/A kickstart: version 11.2(2) [build 11.2(1.184)] system: version 11.2(2) [build 11.2(1.184)] . . .

Determining the Cisco Application Policy Infrastructure Controller Software Release

There is a one-to-one mapping between the software for Cisco Application Policy Infrastructure Controller (APIC) and Cisco Nexus 9000 Series Fabric Switches in ACI mode. To determine which Cisco APIC Software release is running on a device, administrators can disregard the leftmost digit of the Cisco NX-OS Software version number. In the preceding example, the output shows Cisco NX-OS Software version 11.2(2), which maps to Cisco APIC Software Release 1.2(2).

Only products listed in the Vulnerable Products section of this advisory are known to be affected by this vulnerability.

Cisco has determined that this vulnerability does not affect the following Cisco products:

• Firepower 2100 Series Firewalls
• Firepower 4100 Series Next-Generation Firewalls
• Firepower 9300 Security Appliance
• MDS 9000 Series Multilayer Director Switches
• Nexus 1000V Switch for Microsoft Hyper-V
• Nexus 1000V Switch for VMware vSphere
• Nexus 2000 Series Fabric Extenders
• Nexus 3000 Series Switches
• Nexus 3500 Platform Switches
• Nexus 3600 Platform Switches
• Nexus 5000 Series Switches
• Nexus 5500 Platform Switches
• Nexus 5600 Platform Switches
• Nexus 7000 Series Switches
• Nexus 7700 Series Switches
• Nexus 9000 Series Switches in standalone NX-OS mode
• Nexus 9500 R-Series Line Cards and Fabric Modules
• UCS 6200 Series Fabric Interconnects
• UCS 6300 Series Fabric Interconnects
• UCS 6400 Series Fabric Interconnects

from Cisco Security Advisory https://ift.tt/2EDRvoB