CVE-2013-1209

Cisco Nexus 1000V: VSM/VEM encryption is vulnerable in Cisco NX-OS; the VSM-to-VEM packet authentication is insufficient, allowing remote attackers to disable per-packet encryption and integrity protections via crafted packets. Root cause: weak/authentication gap in VSM/VEM packet handling (Bug C...

CVE-2013-1211

CVE-2013-1211 affects Cisco NX-OS on the Nexus 1000V, where insufficient authentication between Virtual Ethernet Module (VEM) and Virtual Supervisor Module (VSM) enables a remote attacker to obtain VEM access. The issue can be exploited via (1) spoofed STUN packets or (2) a misconfigured/rogue VM...

CVE-2013-1213

Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module VEM to a Virtual Supervisor Module VSM, which allows remote attackers to cause a denial of service false VEM unavailability report via a flood of UDP packets, aka Bug ID...

CVE-2013-1212

CVE-2013-1212 affects Cisco Nexus 1000V NX-OS SSL verification, allowing MITM between VSM and VMware vCenter due to improper X.509 certificate validation. Impact: potential eavesdropping or tampering of VSM–vCenter traffic. Affected: Cisco Nexus 1000V (NX-OS). Root cause: improper verification of...

CVE-2013-1211

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...

CVE-2013-1209: Improper Authentication

The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via...

PT-2013-2975

Name of the Vulnerable Software and Affected Versions Cisco Nexus 1000V affected versions not specified Description The SSL functionality in Cisco NX-OS does not properly verify X.509 certificates, allowing man-in-the-middle attackers to spoof servers and intercept or modify Virtual Supervisor...

CVE-2013-1212: Undefined Security Weakness

The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module VSM to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837...

CVE-2013-1213: Undefined Security Weakness

Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module VEM to a Virtual Supervisor Module VSM, which allows remote attackers to cause a denial of service false VEM unavailability report via a flood of UDP packets, aka Bug ID...

PT-2013-2974

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on the Nexus 1000V affected versions not specified Description The issue is related to insufficient authentication between a Virtual Ethernet Module VEM and a Virtual Supervisor Module VSM in Cisco Nexus 1000V. This allows remote...

CVE-2013-1208: Undefined Security Weakness

The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID...

CVE-2013-1211: Improper Authentication

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...

CVE-2013-1210: Improper Restriction of Operations within the Bounds of a Memory Buffer

Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...

PT-2013-2976

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on the Nexus 1000V affected versions not specified Description The issue is related to the insufficient prioritization of heartbeat messages between a Virtual Ethernet Module VEM and a Virtual Supervisor Module VSM. This allows...

PT-2013-1007

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.0 through 12.4 Cisco IOS versions 15.0 through 15.3 Cisco IOS-XE versions 2.x through 3.9.xS Cisco ASA and PIX versions 7.x through 9.1 Cisco FWSM Cisco NX-OS Cisco StarOS versions prior to 14.0.50488 Description The OSPF...

Cisco Nexus 7000 Frame Forwarding Loop Denial of Service Vulnerability

Cisco NX-OS Software running on Nexus 7000 Series Switches contains a vulnerability that could allow an unauthenticated, remote attacker with access to an adjacent network to cause a denial of service DoS condition. The vulnerability is due to mishandling of a specific type of nonstandard Etherne...

Design/Logic Flaw

The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service forwarding loop and service outage via a crafted frame, aka Bug ID CSCug47098...

CVE-2013-1226

CVE-2013-1226 affects Cisco NX-OS on Nexus 7000 series switches. The vulnerability is in the Ethernet frame-forwarding implementation and can be exploited remotely by sending a crafted nonstandard Ethernet frame from an adjacent network to cause a forwarding loop and resulting DoS. Affected compo...

PT-2013-2989

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions on Nexus 7000 devices affected versions not specified Description The issue is related to the mishandling of nonstandard Ethernet frames by the Cisco NX-OS software, which can be exploited by an unauthenticated, remote...

CVE-2013-1226: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service forwarding loop and service outage via a crafted frame, aka Bug ID CSCug47098...