CVE-2013-1210

Array index error in the Virtual Ethernet Module VEM kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service ESXi crash and purple screen of death by sending crafted STUN packets to a VEM, aka Bug ID...

CVE-2013-1211

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module VEM to Virtual Supervisor Module VSM communication, which allows remote attackers to obtain VEM access via 1 spoofed STUN packets or 2 a crafted VMware ESXi instance, aka Bug ID CSCud14832...

CVE-2013-1212

CVE-2013-1212 affects Cisco Nexus 1000V NX-OS SSL verification, allowing MITM between VSM and VMware vCenter due to improper X.509 certificate validation. Impact: potential eavesdropping or tampering of VSM–vCenter traffic. Affected: Cisco Nexus 1000V (NX-OS). Root cause: improper verification of...

Cisco Nexus 7000 Frame Forwarding Loop Denial of Service Vulnerability

Cisco NX-OS Software running on Nexus 7000 Series Switches contains a vulnerability that could allow an unauthenticated, remote attacker with access to an adjacent network to cause a denial of service DoS condition. The vulnerability is due to mishandling of a specific type of nonstandard Etherne...

Design/Logic Flaw

The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service forwarding loop and service outage via a crafted frame, aka Bug ID CSCug47098...

CVE-2013-1226

CVE-2013-1226 affects Cisco NX-OS on Nexus 7000 series switches. The vulnerability is in the Ethernet frame-forwarding implementation and can be exploited remotely by sending a crafted nonstandard Ethernet frame from an adjacent network to cause a forwarding loop and resulting DoS. Affected compo...

CVE-2013-1179

Multiple buffer overflows in the 1 SNMP and 2 License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.25 and 6.x before 6.11 and MDS 9000 devices 4.x and 5.x before 5.25 allow remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bu...

CVE-2013-1180

Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.25 and 6.x before 6.11 and MDS 9000 devices 4.x and 5.x before 5.25 allows remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54822...

CVE-2013-1178

Multiple buffer overflows in the Cisco Discovery Protocol CDP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.24 and 6.x before 6.11, Nexus 5000 and 5500 devices 4.x and 5.x before 5.13N11, Nexus 4000 devices before 4.12E11h, Nexus 3000 devices 5.x before 5.03U31, Nexus...

CVE-2013-1181

Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.03N22, Nexus 3000 devices 5.x before 5.03U32, and Unified Computing System UCS 6200 devices before 2.01w allows remote attackers to cause a denial of service device reload by sending a jumbo packet to the management interface, aka Bug IDs...

Design/Logic Flaw

Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.03N22, Nexus 3000 devices 5.x before 5.03U32, and Unified Computing System UCS 6200 devices before 2.01w allows remote attackers to cause a denial of service device reload by sending a jumbo packet to the management interface, aka Bug IDs...

CVE-2013-1179

CVE-2013-1179 is a Cisco NX-OS vulnerability affecting Nexus 7000 (4.x/5.x before 5.2(5)) and MDS 9000 (4.x/5.x before 5.2(5)) where 1) SNMP and 2) License Manager components contain buffer overflow flaws. The root cause is improper boundary/size handling in these subsystems, allowing remote auth...

CVE-2013-1181

Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.03N22, Nexus 3000 devices 5.x before 5.03U32, and Unified Computing System UCS 6200 devices before 2.01w allows remote attackers to cause a denial of service device reload by sending a jumbo packet to the management interface, aka Bug IDs...

CVE-2013-1179

Multiple buffer overflows in the 1 SNMP and 2 License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.25 and 6.x before 6.11 and MDS 9000 devices 4.x and 5.x before 5.25 allow remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bu...

CVE-2013-1178

Cisco NX-OS CDP-related vulnerability (CVE-2013-1178) affects Nexus 7000/5000/5500/4000/3000, Nexus 1000V, MDS 9000, UCS 6100/6200, and CGR 1000. Multiple buffer-overflow flaws in the Cisco Discovery Protocol allow remote attackers to execute arbitrary code via malformed CDP packets. Impact is de...

CVE-2013-1181

Cisco NX-OS-based products (Nexus 5500, Nexus 3000, UCS 6200) are affected by CVE-2013-1181. The issue allows remote attackers to trigger a denial-of-service (device reload) by sending a jumbo packet to the management interface. Affected ranges noted as Nexus 5500 4.x/5.x before 5.0(3)N2(2), Nexu...

CVE-2013-1180

Cisco NX-OS-based products (Nexus 7000 series on 4.x/5.x before 5.2(5) and 6.x before 6.1(1); MDS 9000 on 4.x/5.x before 5.2(5)) are affected by a buffer overflow in the SNMP implementation that allows remote authenticated users to execute arbitrary code via a crafted SNMP request (Bug CSCtx54822...

CVE-2013-1180

Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.25 and 6.x before 6.11 and MDS 9000 devices 4.x and 5.x before 5.25 allows remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54822...

Cisco Releases Security Advisories

Cisco has released three security advisories to address vulnerabilities affecting Cisco NX-OS-based products, Cisco Device Manager, and Cisco Unified Computing System. These vulnerabilities may allow an attacker to bypass authentication controls, execute arbitrary code, obtain sensitive...

Multiple Vulnerabilities in Cisco NX-OS-Based Products

Cisco Nexus, Cisco Unified Computing System UCS, Cisco MDS 9000 Series Multilayer Switches, and Cisco 1000 Series Connected Grid Routers CGR are all based on the Cisco NX-OS operating system. These products are affected by one or more of the following vulnerabilities: Multiple Cisco Discovery...