CVE-2012-1340: Buffer Overflow
The Fibre Channel over IP (FCIP) implementation in Cisco MDS NX-OS 4.2 and 5.2 on MDS 9000 series switches allows remote attackers to cause a denial of service (module reload) via a crafted FCIP header, aka Bug ID CSCtn93151.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1340?
CVE-2012-1340 has a high severity rating as it allows remote attackers to cause a denial of service by exploiting a vulnerability in the FCIP implementation.
How do I fix CVE-2012-1340?
To fix CVE-2012-1340, upgrade the Cisco MDS 9000 NX-OS to the patched version recommended in the Cisco security advisory.
Which versions of Cisco MDS NX-OS are affected by CVE-2012-1340?
CVE-2012-1340 affects Cisco MDS NX-OS versions 4.2 and 5.2 on MDS 9000 series switches.
What kind of attack does CVE-2012-1340 facilitate?
CVE-2012-1340 facilitates a denial of service attack that can lead to a module reload on affected Cisco switches.
Is there a workaround for CVE-2012-1340?
There is no official workaround for CVE-2012-1340; updating to a secure version is the recommended response.