6041 matches found
CVE-2013-1210
Cisco Nexus 1000V Nexus 1000V VEM kernel driver for VMware ESXi is affected by CVE-2013-1210 due to an out-of-bounds array access when STUN debugging is enabled. The issue can be exploited remotely by sending crafted STUN packets to the VEM, potentially crashing the ESXi hypervisor and causing a ...
CVE-2013-1209
The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via...
CVE-2013-1208
The CVE-2013-1208 issue affects Cisco Nexus 1000V NX-OS VSM/VEM communication. The vulnerability arises from how encryption between VSM and VEM is handled, potentially allowing remote attackers with Layer 2/3 access to intercept or modify traffic. Affected component is the VSM-to-VEM communicatio...
CVE-2013-1211
CVE-2013-1211 affects Cisco NX-OS on the Nexus 1000V, where insufficient authentication between Virtual Ethernet Module (VEM) and Virtual Supervisor Module (VSM) enables a remote attacker to obtain VEM access. The issue can be exploited via (1) spoofed STUN packets or (2) a misconfigured/rogue VM...
CVE-2013-1210
Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...
CVE-2013-1213
CVE-2013-1213 affects Cisco NX-OS on the Nexus 1000V, where heartbeat messages between a Virtual Ethernet Module (VEM) and a Virtual Supervisor Module (VSM) are not given proper priority. This can be exploited by an attacker via a UDP flood to trigger a DoS through false VEM unavailability report...
CVE-2013-1212
CVE-2013-1212 affects Cisco Nexus 1000V NX-OS SSL verification, allowing MITM between VSM and VMware vCenter due to improper X.509 certificate validation. Impact: potential eavesdropping or tampering of VSM–vCenter traffic. Affected: Cisco Nexus 1000V (NX-OS). Root cause: improper verification of...
Cisco Nexus 1000V VSM/VEM Communication Encryption Bypass Vulnerability
Cryptographic issues in the Cisco Nexus 1000v could allow an unauthenticated, remote attacker to to inject traffic or eavesdrop on the communications between a Virtual Supervisor Module VSM and a Virtual Ethernet Module VEM. The issues are due to errors in the implementation of the cryptography...
Cisco Nexus 1000V VSM/VEM Communication Encryption Bypass Vulnerability
A vulnerability in the implementation of the encryption for the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communications on the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to to disable encryption and integrity protections on a per-packet basis. The...
Cisco Nexus 1000V VSM to vCenter Communication Man-in-the-Middle Vulnerability
A vulnerability in the SSL implementation of the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to perform a man-in-the-middle attack against Virtual Supervisor Module VSM to VMware vCenter communications. The vulnerability is due to improper verification of SSL security...
Cisco Nexus 1000V ESXi Hypervisor Denial of Service Vulnerability
A vulnerability in the Cisco Nexus 1000V Virtual Ethernet Module VEM kernel driver for VMware ESXi could allow an unauthenticated, remote attacker to cause the ESXi hypervisor to crash, resulting in a purple screen of death PSOD. The vulnerability is due to insufficient validation of STUN protoco...
Cisco Nexus 1000V Insufficient VSM/VEM Authentication Vulnerability
A vulnerability in the Cisco Nexus 1000V could allow an unauthenticated, remote attacker to obtain control over a Virtual Ethernet Module VEM and associated port groups. The vulnerability is due to insufficient authentication between a VEM and a Virtual Supervisor Module VSM. An attacker could...
CVE-2013-1209: Improper Authentication
The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via...
CVE-2013-1208: Undefined Security Weakness
The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID...
CVE-2013-1213: Undefined Security Weakness
Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module VEM to a Virtual Supervisor Module VSM, which allows remote attackers to cause a denial of service false VEM unavailability report via a flood of UDP packets, aka Bug ID...
CVE-2013-1211: Improper Authentication
Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...
CVE-2013-1212: Undefined Security Weakness
The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module VSM to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837...
CVE-2013-1210: Improper Restriction of Operations within the Bounds of a Memory Buffer
Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...
CVE-2013-1226
The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service forwarding loop and service outage via a crafted frame, aka Bug ID CSCug47098...
Design/Logic Flaw
The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service forwarding loop and service outage via a crafted frame, aka Bug ID CSCug47098...