CVE:CVE-2019-1734
CNNVD:CNNVD-201905-723
Cisco Firepower 4100 Series等都是美国思科（Cisco）公司的产品。Cisco Firepower 4100 Series是一款4100系列的防火墙设备。Cisco Firepower 9300 Security Appliance是一款9300系列的安全设备。Cisco FXOS Software是一套运行在思科安全设备中的防火墙软件。Cisco MDS 9000 Series Multilayer Switches是一款MDS 9000系列多层交换机。Cisco NX-OS Software是一套交换机使用的数据中心级操作系统软件。
Cisco FXOS Software和Cisco NX-OS Software中的CLI诊断命令的实现存在信息泄露漏洞。该漏洞源于网络系统或产品在运行过程中存在配置等错误。未授权的攻击者可利用漏洞获取受影响组件敏感信息。以下产品及版本受到影响：Cisco Firepower 4100 Series；Firepower 9300 Security Appliances；MDS 9000 Series Multilayer Switches；Nexus 3000 Series Switches；Nexus 3500 Platform Switches；Nexus 3600 Platform Switches；Nexus 5500 Platform Switches；Nexus 5600 Platform Switches；Nexus 6000 Series Switches；Nexus 7000 Series Switches；Nexus 7700 Series Switches；Nexus 9000 Series Switches in standalone NX-OS mode；Nexus 9500 R-Series Switching Platform；UCS 6200 Series Fabric Interconnects；UCS 6300 Series Fabric Interconnects。
solution:Upgrade cisco firepower_extensible_operating_system to a higher version than 2.2.2.91,2.3.1.111,2.4.1.101,and avoid the version (,2.2.2.91),[2.3,2.3.1.111),[2.4,2.4.1.101); Upgrade cisco nx-os to a higher version than 6.2\(7\,7.0\(3\i4\(9\,7.0\(3\i7\(6\,6.0\(2\a4\(1\,7.0\(3\i4\(9\,7.0\(3\f3\(5\,7.1\(4\n1\(1\,7.3\(0\n1\(1\,6.2\(6\,4.0\(1a\,and avoid the version (,6.2\(7\)),(,7.0\(3\)i4\(9\)),[7.0\(3\)i7,7.0\(3\)i7\(6\)),(,6.0\(2\)a4\(1\)),[7.0\(3\)i4,7.0\(3\)i4\(9\)),[7.0\(3\),7.0\(3\)f3\(5\)),(,7.1\(4\)n1\(1\)),[7.2,7.3\(0\)n1\(1\)),(,6.2\(6\)),(,4.0\(1a\))