CVE-2013-1211

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-05-29 · updated 2026-06-16
Weakness: CWE-287

Description

Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM access via (1) spoofed STUN packets or (2) a crafted VMware ESXi instance, aka Bug ID CSCud14832.

Affected products

Cisco NX-OS: all versions

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211

Get alerted when CVE-2013-1211 or the next vulnerability affects your stack