CVE-2013-1208

The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID CSCud14691.

Score

CVSS 2.0 5.8 Medium

Status

Modified - psirt@cisco.com

Published

2013-05-29

Last modified

2024-09-17

Weaknesses

CWE-310

Affected products

• Nx-os (Cisco)

References

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1208