CVE-2013-1208: Medium severity cisco nx-os vulnerability
The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID CSCud14691.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1208?
CVE-2013-1208 is classified as a high severity vulnerability due to its potential to allow remote attackers to intercept or modify network traffic.
How do I fix CVE-2013-1208?
To mitigate CVE-2013-1208, it's recommended to upgrade to a fixed version of Cisco NX-OS as provided by Cisco's security advisory.
What are the consequences of CVE-2013-1208?
The consequences of CVE-2013-1208 include unauthorized interception or modification of network traffic between the VSM and VEM.
Which software is affected by CVE-2013-1208?
CVE-2013-1208 affects Cisco NX-OS, specifically version running on the Nexus 1000V.
Can CVE-2013-1208 be exploited remotely?
Yes, CVE-2013-1208 can be exploited remotely if the attacker has access to certain Layer 2 or Layer 3 networks.