Lucene search

[email protected]CVE-2012-6396

HistoryJan 19, 2013 - 8:55 p.m.

CVE-2012-6396

2013-01-1920:55:01

CWE-399

[email protected]

web.nvd.nist.gov

cisco

nx-os

vulnerability

denial of service

cve-2012-6396

nvd

memory consumption

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.0%

JSON

Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID CSCud44300.

Affected configurations

NVD

Node

cisconx-osMatch-

AND

cisconexus_7000Match-

cisconexus_7000_10-slotMatch-

cisconexus_7000_18-slotMatch-

cisconexus_7000_9-slotMatch-

CPENameOperatorVersion
cisco:nx-oscisco nx-oseq-
cisco:nexus_7000cisco nexus 7000eq-
cisco:nexus_7000_10-slotcisco nexus 7000 10-sloteq-
cisco:nexus_7000_18-slotcisco nexus 7000 18-sloteq-
cisco:nexus_7000_9-slotcisco nexus 7000 9-sloteq-

CPE	Name	Operator	Version
cisco:nx-os	cisco nx-os	eq	-
cisco:nexus_7000	cisco nexus 7000	eq	-
cisco:nexus_7000_10-slot	cisco nexus 7000 10-slot	eq	-
cisco:nexus_7000_18-slot	cisco nexus 7000 18-slot	eq	-
cisco:nexus_7000_9-slot	cisco nexus 7000 9-slot	eq	-

References

tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6396

www.securitytracker.com/id/1028018

4.9 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:H/Au:S/C:N/I:N/A:C

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

44.0%

JSON

Related for CVE-2012-6396

prion1 cvelist1 nvd1