CVE-2019-1589

CVE-2019-1589 describes a vulnerability in the Trusted Platform Module (TPM) functionality of Cisco Nexus 9000 Series Fabric Switches operating in ACI mode. This flaw, stemming from inadequate data protection for disk encryption keys, allows an unauthenticated, local attacker with physical access to view sensitive information. With a CVSS score of 4.6 (Medium), exploitation requires physical access to the device, but a successful attack could lead to a custom boot process or further compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.