Lucene search
CiscoCVE-2013-1211HistoryMay 29, 2013 - 7:55 p.m.
CVE-2013-1211
2013-05-2919:55:01
CWE-287
cisco
web.nvd.nist.gov
26
cisco
nx-os
authentication
vulnerability
nexus 1000v
vem
vsm
stun
vmware esxi
cscud14832
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.7%
Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM access via (1) spoofed STUN packets or (2) a crafted VMware ESXi instance, aka Bug ID CSCud14832.
Affected configurations
Node
cisconx-osMatch-
cisconexus_1000vMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| cisco | nx-os | - | cpe:2.3:o:cisco:nx-os:-:*:*:*:*:*:*:* |
| cisco | nexus_1000v | - | cpe:2.3:h:cisco:nexus_1000v:-:*:*:*:*:*:*:* |
Related
nessus
nessus
Cisco Nexus 1000V Insufficient VSM/VEM Authentication (CVE-2013-1211)
2023-07-25 00:00:00
cvelist
cvelist
CVE-2013-1211
2013-05-29 19:00:00
prion
prion
Authentication flaw
2013-05-29 19:55:00
nvd
nvd
CVE-2013-1211
2013-05-29 19:55:01
cisco
cisco
Cisco Nexus 1000V Insufficient VSM/VEM Authentication Vulnerability
2013-05-29 15:07:40
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7
Confidence
Low
EPSS
0.002
Percentile
52.7%
Related for CVE-2013-1211