Unscored severity · published Feb 16, 2012
CVE-2012-0352
Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5,…
–
CVSS
1.2%
EPSS
No
On KEV
Description
Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before 5.1.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (netstack process crash and device reload) via a malformed IP packet, aka Bug IDs CSCti23447, CSCti49507, and CSCtj01991.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 68% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N1
Nexus 1000v · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5000 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5010 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5020 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5548p · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5548up · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5596up · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 10-slot · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 18-slot · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 9-slot · Cisco
All versions, or not specified · source: NVD
NX
Nx-os · Cisco
4.0(0)n1(1a); 4.0(0)n1(2); 4.0(0)n1(2a); 4.0(1a)n1(1); 4.0(1a)n1(1a); 4.0(1a)n2(1); +34 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0352
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0352
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120215-nxos
More from Nexus 1000v
–
CVE-2015-0775
The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS…
–
CVE-2013-5556
The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and…
–
CVE-2013-3400
The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID…
–
CVE-2013-1213
Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor Module (VSM), which allows…
–
CVE-2013-1212
The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or…