CVE-2019-1808

CVE-2019-1808 describes a vulnerability in the Image Signature Verification feature of Cisco NX-OS Software. This flaw allows an authenticated, local attacker with administrator-level credentials to install a malicious software patch due to improper digital signature verification. A successful exploit could lead to booting an unauthorized software image on affected Cisco devices. The vulnerability has a CVSS score of 4.4 (Medium), indicating a local attack vector with low complexity, requiring high privileges, and resulting in high integrity impact (installation of malicious patches). There is no confidentiality or availability impact. Currently, there is no evidence of active exploitation, nor is there publicly available exploit code in Metasploit or ExploitDB. The CVE has received minimal community discussion and media coverage, suggesting low public awareness and a lack of widespread exploitation.