PT-2013-2974 · Cisco+1 · Nexus 1000V+3

Published 2013-05-29 · Updated 2013-05-30 · CVE-2013-1211

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco NX-OS on the Nexus 1000V (affected versions not specified)

Description The issue is related to insufficient authentication between a Virtual Ethernet Module (VEM) and a Virtual Supervisor Module (VSM) in Cisco Nexus 1000V. This allows remote attackers to obtain VEM access via spoofed STUN packets or a crafted VMware ESXi instance. An attacker could exploit this by using STUN protocol packets or setting up a rogue ESXi instance to gain control over a VEM. The vulnerability may require access to a trusted, internal network to successfully exploit.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2013-1211

Affected Products

Cisco Nx-Os

Cisco Nexus

Nexus 1000V

Vmware Esxi

References · 3

• http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2013-1211 · Security Note
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130529-CVE-2013-1211 · Note