CVE-2019-1603

CVE-2019-1603 is a privilege escalation vulnerability in the Command Line Interface (CLI) of Cisco NX-OS Software, affecting various Nexus 3000, 3500, 3600, 9000, and 9500 series switches running specific older versions. An authenticated, local attacker can exploit insufficient authorization enforcement to elevate their privileges to administrator level, allowing them to make unauthorized configuration changes. With a CVSS score of 7.8 (High), this vulnerability has a local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.