Unscored severity · published May 26, 2014
CVE-2013-1191
Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an…
–
CVSS
1.9%
EPSS
No
On KEV
Description
Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.9% · higher than 79% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N7
Nexus 7000 · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 10-slot · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 18-slot · Cisco
All versions, or not specified · source: NVD
N7
Nexus 7000 9-slot · Cisco
All versions, or not specified · source: NVD
NX
Nx-os · Cisco
6.1; 6.1(1); 6.1(2); 6.1(3); 6.1(4); 6.1(4a) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1191
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1191
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos
More from Nexus 7000
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…
–
CVE-2014-2201
The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and 6.0 before 6.0(2) on Nexus 7000 devices allows remote attackers to cause a denial of…
–
CVE-2014-0684
Cisco NX-OS 6.2(2) on Nexus 7000 switches allows local users to cause a denial of service via crafted sed input, aka Bug ID CSCui56136
–
CVE-2012-4090
The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the…
–
CVE-2013-1226
The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a…