CVE-2013-1191
First published: Mon May 26 2014(Updated: )
Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400.
Credit: ykramarz@cisco.com psirt@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco NX-OS | =6.1 | |
| Cisco NX-OS | =6.1\(1\) | |
| Cisco NX-OS | =6.1\(2\) | |
| Cisco NX-OS | =6.1\(3\) | |
| Cisco NX-OS | =6.1\(4\) | |
| Cisco NX-OS | =6.1\(4a\) | |
| Cisco Nexus 7000 Series Switch | ||
| Cisco Nexus 7000 | ||
| Cisco Nexus 7000 | ||
| Cisco Nexus 7000 9-Slot Firmware | ||
| All of | ||
| Any of | ||
| Cisco NX-OS | =6.1 | |
| Cisco NX-OS | =6.1\(1\) | |
| Cisco NX-OS | =6.1\(2\) | |
| Cisco NX-OS | =6.1\(3\) | |
| Cisco NX-OS | =6.1\(4\) | |
| Cisco NX-OS | =6.1\(4a\) | |
| Any of | ||
| Cisco Nexus 7000 Series Switch | ||
| Cisco Nexus 7000 | ||
| Cisco Nexus 7000 | ||
| Cisco Nexus 7000 9-Slot Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2013-1191?
CVE-2013-1191 has a high severity rating due to its potential to allow privilege escalation in a multi-VDC environment.
How do I fix CVE-2013-1191?
To mitigate CVE-2013-1191, upgrade to Cisco NX-OS version 6.1(5) or later, which addresses this vulnerability.
What systems are affected by CVE-2013-1191?
CVE-2013-1191 affects Cisco NX-OS 6.1 versions prior to 6.1(5) on Nexus 7000 devices with local authentication and multiple VDCs enabled.
What is the impact of CVE-2013-1191?
CVE-2013-1191 allows remote authenticated users to gain privileges in an unintended VDC, potentially compromising the security of the system.
Can CVE-2013-1191 be exploited remotely?
Yes, CVE-2013-1191 can be exploited by remote authenticated users through SSH sessions to the management interface.
- agent/type
- agent/first-publish-date
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/author
- agent/source
- agent/softwarecombine
- agent/event
- agent/tags
- vendor/cisco
- canonical/cisco nx-os
- version/cisco nx-os/6.1
- version/cisco nx-os/6.1\(1\)
- version/cisco nx-os/6.1\(2\)
- version/cisco nx-os/6.1\(3\)
- version/cisco nx-os/6.1\(4\)
- version/cisco nx-os/6.1\(4a\)
- canonical/cisco nexus 7000 series switch
- canonical/cisco nexus 7000
- canonical/cisco nexus 7000 9-slot firmware