CVE-2013-1209 Auth bypass in n/a
Remote attackers can disable packet encryption and integrity protection in Cisco Nexus 1000V by sending crafted packets due to improper authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2013-1209?
CVE-2013-1209 is a medium-severity authentication bypass vulnerability in Cisco Nx-Os, published on 29 May 2013. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via crafted packets, aka Bug ID CSCud14710.
Weakness: CWE-287
Which versions are affected by CVE-2013-1209?
It affects 1 product.
Products include Cisco Nx-Os.
How do I fix CVE-2013-1209?
No fix has been published for CVE-2013-1209 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2013-1209 being exploited?
There is no known exploitation of CVE-2013-1209 in the wild and no public exploit code.
Other vulnerabilities in Cisco Nx-Os
Sources
Also known as GHSA-m4mh-hhpp-pm37.