CVE-2013-5556

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-18 · updated 2026-06-16
Weakness: CWE-264

Description

The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.2(1)VSG1(1) for Nexus 1000V switches allows local users to gain privileges and execute arbitrary commands via crafted "install all iso" arguments, aka Bug ID CSCui21340.

Affected products

Cisco Nexus 1000V: through 4.2\(1\)sv1\(5.2b\); 4.2(1)vsg1(1), 5.2(1)sm1(5.1), 4.2(1)_sv1(4), 4.2(1)_sv1(4a), 4.2(1)_sv1(4b), 4.2(1)sv1(5.1) (+2)

References

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556
http://tools.cisco.com/security/center/viewAlert.x?alertId=31774
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556
http://tools.cisco.com/security/center/viewAlert.x?alertId=31774

Get alerted when CVE-2013-5556 or the next vulnerability affects your stack