CVE-2013-1191

Severity: high (CVSS 7.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-05-26 · updated 2026-06-16
Weakness: CWE-264

Description

Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400.

Affected products

Cisco Nexus 7000: all versions
Cisco Nexus 7000 10-Slot: all versions
Cisco Nexus 7000 18-Slot: all versions
Cisco Nexus 7000 9-Slot: all versions
Cisco NX-OS: 6.1, 6.1(1), 6.1(2), 6.1(3), 6.1(4), 6.1(4a)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos

Get alerted when CVE-2013-1191 or the next vulnerability affects your stack