CVE-2012-4135

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-21 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.

Affected products

Cisco NX-OS: through 6.1\(2\); 4.0, 4.0(0)n1(1a), 4.0(0)n1(2), 4.0(0)n1(2a), 4.0(1a)n1(1), 4.0(1a)n1(1a) (+91)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4135
http://tools.cisco.com/security/center/viewAlert.x?alertId=32237
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4135
http://tools.cisco.com/security/center/viewAlert.x?alertId=32237

Get alerted when CVE-2012-4135 or the next vulnerability affects your stack