CVE-2012-6396

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-01-19 · updated 2026-06-16
Weakness: CWE-399

Description

Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID CSCud44300.

Affected products

Cisco Nexus 7000: all versions
Cisco Nexus 7000 10-Slot: all versions
Cisco Nexus 7000 18-Slot: all versions
Cisco Nexus 7000 9-Slot: all versions
Cisco NX-OS: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6396
http://www.securitytracker.com/id/1028018
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6396
http://www.securitytracker.com/id/1028018

Get alerted when CVE-2012-6396 or the next vulnerability affects your stack