Lucene search
HistoryOct 03, 2022 - 4:14 p.m.
CVE-2013-1211
cisco
nx-os
authentication
vulnerability
nexus 1000v
vem
vsm
stun
vmware esxi
cscud14832
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.9%
Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM access via (1) spoofed STUN packets or (2) a crafted VMware ESXi instance, aka Bug ID CSCud14832.
Affected configurations
Node
cisconx-osMatch-
cisconexus_1000vMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:nx-os | cisco nx-os | eq | - |
Related
cvelist
cvelist
CVE-2013-1211
2022-10-03 16:14:49
nessus
nessus
Cisco Nexus 1000V Insufficient VSM/VEM Authentication (CVE-2013-1211)
2023-07-25 00:00:00
prion
prion
Authentication flaw
2013-05-29 19:55:00
cisco
cisco
Cisco Nexus 1000V Insufficient VSM/VEM Authentication Vulnerability
2013-05-29 15:07:40
nvd
nvd
CVE-2013-1211
2013-05-29 19:55:01
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.9%
Related for CVE-2013-1211