Cisco Nexus 1000V VSM/VEM Communication Encryption Bypass (CVE-2013-1209)

The encryption functionality in the Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via...

CVE-2013-1209

Cisco Nexus 1000V: VSM/VEM encryption is vulnerable in Cisco NX-OS; the VSM-to-VEM packet authentication is insufficient, allowing remote attackers to disable per-packet encryption and integrity protections via crafted packets. Root cause: weak/authentication gap in VSM/VEM packet handling (Bug C...