Lucene search

K
cveCiscoCVE-2013-1191
HistoryMay 26, 2014 - 12:25 a.m.

CVE-2013-1191

2014-05-2600:25:31
CWE-264
cisco
web.nvd.nist.gov
32
cve-2013-1191
cisco
nx-os
nexus 7000
bug id cscud88400
ssh
vdc
authentication
privilege escalation

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

52.5%

Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400.

Affected configurations

Nvd
Node
cisconx-osMatch6.1
OR
cisconx-osMatch6.1\(1\)
OR
cisconx-osMatch6.1\(2\)
OR
cisconx-osMatch6.1\(3\)
OR
cisconx-osMatch6.1\(4\)
OR
cisconx-osMatch6.1\(4a\)
AND
cisconexus_7000Match-
OR
cisconexus_7000_10-slotMatch-
OR
cisconexus_7000_18-slotMatch-
OR
cisconexus_7000_9-slotMatch-
VendorProductVersionCPE
cisconx-os6.1cpe:2.3:o:cisco:nx-os:6.1:*:*:*:*:*:*:*
cisconx-os6.1(1)cpe:2.3:o:cisco:nx-os:6.1\(1\):*:*:*:*:*:*:*
cisconx-os6.1(2)cpe:2.3:o:cisco:nx-os:6.1\(2\):*:*:*:*:*:*:*
cisconx-os6.1(3)cpe:2.3:o:cisco:nx-os:6.1\(3\):*:*:*:*:*:*:*
cisconx-os6.1(4)cpe:2.3:o:cisco:nx-os:6.1\(4\):*:*:*:*:*:*:*
cisconx-os6.1(4a)cpe:2.3:o:cisco:nx-os:6.1\(4a\):*:*:*:*:*:*:*
cisconexus_7000-cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*
cisconexus_7000_10-slot-cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*
cisconexus_7000_18-slot-cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*
cisconexus_7000_9-slot-cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*

CVSS2

7.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

52.5%