CVE-2019-1767

CVE-2019-1767 is a buffer overflow and command injection vulnerability in Cisco NX-OS Software, affecting versions prior to 8.3(1). An authenticated, local attacker with administrator credentials can exploit insufficient argument validation in a specific CLI command. This allows for arbitrary command execution with root privileges on the underlying operating system. The vulnerability has a CVSS score of 6.7 (Medium), indicating a local attack vector with low complexity, but a high impact on confidentiality, integrity, and availability. Exploitation requires valid administrator credentials. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting low public awareness.