Unscored severity · published Oct 5, 2013
CVE-2012-4090
The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the…
–
CVSS
2.1%
EPSS
No
On KEV
Description
The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.1% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N7
Nexus 7000 · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 10-slot · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 18-slot · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 9-slot · Cisco
All versions, or not specified · source: NVD
NX
Nx-os · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-4090
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-4090
osvdb.org
http://osvdb.org/98123
secunia.com
http://secunia.com/advisories/55206
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4090
Third Party Advisory
http://www.securityfocus.com/bid/62841
Third Party Advisory
http://www.securitytracker.com/id/1029158
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/87670
More from Nexus 7000
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…
–
CVE-2014-2201
The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of…
–
CVE-2013-1191
Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an…
–
CVE-2014-0684
Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136
–
CVE-2013-1226
The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a…