Auth bypass in Cisco Nexus 1000v
CVE-2013-1211
Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM access via (1) spoofed STUN packets or (2) a crafted VMware ESXi instance, aka Bug ID CSCud14832.
Vulnerability class: Broken Authentication
EPSS: 0.016 (73.2th percentile) — read the EPSS interpretation.
Affected products
- Cisco Nexus_1000v
- Cisco Nx-os
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)