Vulnerability in Cisco Nexus 1000v
CVE-2013-1208
The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID CSCud14691.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Nexus_1000v
- Cisco Nx-os
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)