CVE-2013-1211 — MEDIUM (5.0)

Vulnerability Description

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM access via (1) spoofed STUN packets or (2) a crafted VMware ESXi instance, aka Bug ID CSCud14832.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Cisco	Nx-Os	-
Cisco	Nexus 1000V	-

Related Weaknesses (CWE)

CWE-287

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211Vendor Advisory

FAQ

What is CVE-2013-1211?

CVE-2013-1211 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM a...

How severe is CVE-2013-1211?

CVE-2013-1211 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2013-1211?

Check the references section above for vendor advisories and patch information. Affected products include: Cisco Nx-Os, Cisco Nexus 1000V.