CVE-2013-1208

Published: May 29, 2013Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID CSCud14691.

Affected (1)

Products: Cisco: Nx Os

1 product

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Cisco Nx Os	All versions

Running on/with	Platform Versions
Cisco Nexus 1000v	All versions

Related CWEs

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1208

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1208

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.