Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2013-1171 State: PUBLISHED Published: 2013-04-01T19:00:00Z Last Updated: 2024-09-16T17:17:40.843Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the element-list implementation in Cisco Connected Grid Network Management System (CG-NMS) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug IDs CSCue14517, CSCue38914, CSCue38884, CSCue38882, CSCue38881, CSCue38872, CSCue38868, CSCue38866, CSCue38853, and CSCue14540. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1171
CVE ID: CVE-2013-1172 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-17T02:51:40.629Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) does not properly verify files, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14153. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1172
CVE ID: CVE-2013-1173 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T19:45:51.955Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in ciscod.exe in the Cisco Security Service in Cisco AnyConnect Secure Mobility Client (aka AnyConnect VPN Client) allows local users to gain privileges via unspecified vectors, aka Bug ID CSCud14143. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1173
CVE ID: CVE-2013-1174 State: PUBLISHED Published: 2013-04-05T16:00:00Z Last Updated: 2024-09-16T16:27:35.371Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Tivoli Business Service Manager (TBSM) in Hosted Collaboration Mediation (HCM) in Cisco Hosted Collaboration Solution allows remote attackers to cause a denial of service (temporary service hang) by sending many TCP packets to certain ports, aka Bug ID CSCue03703. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1174
CVE ID: CVE-2013-1175 State: REJECTED Published: 2013-05-16T01:00:00 Last Updated: 2013-06-04T09:00:00 Description: No description available.
CVE ID: CVE-2013-1176 State: PUBLISHED Published: 2013-04-18T18:00:00Z Last Updated: 2024-09-16T19:52:01.296Z Vendors: n/a Products: n/a Problem Types: n/a Description: The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.3(2.30), TelePresence MCU MSE 8510 devices before 4.3(2.30), and TelePresence Server before 2.3(1.55) does not properly validate H.264 data, which allows remote attackers to cause a denial of service (device reload) via crafted RTP packets in a (1) SIP session or (2) H.323 session, aka Bug IDs CSCuc11328 and CSCub05448. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco
Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-tpi
CVE ID: CVE-2013-1177 State: PUBLISHED Published: 2013-04-18T18:00:00Z Last Updated: 2024-09-17T00:16:45.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cisco Network Admission Control (NAC) Manager before 4.8.3.1 and 4.9.x before 4.9.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCub23095. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130417-nac
CVE ID: CVE-2013-1178 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-17T00:17:30.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allo
uting System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
CVE ID: CVE-2013-1179 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T19:51:24.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allow remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54830. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
CVE ID: CVE-2013-1180 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T22:19:44.167Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54822. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
CVE ID: CVE-2013-1181 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-17T01:42:01.056Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.0(3)N2(2), Nexus 3000 devices 5.x before 5.0(3)U3(2), and Unified Computing System (UCS) 6200 devices before 2.0(1w) allows remote attackers to cause a denial of service (device reload) by sending a jumbo packet to the management interface, aka Bug IDs CSCtx17544, CSCts10593, and CSCtx95389. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
CVE ID: CVE-2013-1182 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T22:25:30.664Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page in the Web Console in the Manager component in Cisco Unified Computing System (UCS) before 1.0(2h), 1.1 before 1.1(1j), and 1.3(x) allows remote attackers to bypass LDAP authentication via a malformed request, aka Bug ID CSCtc91207. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
CVE ID: CVE-2013-1183 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-17T00:11:24.025Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the Intelligent Platform Management Interface (IPMI) functionality in the Manager component in Cisco Unified Computing System (UCS) 1.0 and 1.1 before 1.1(1j) and 1.2 before 1.2(1b) allows remote attackers to execute arbitrary code via malformed data in a UDP packet, aka Bug ID CSCtd32371. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
CVE ID: CVE-2013-1184 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T17:22:47.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management API in the XML API management service in the Manager component in Cisco Unified Computing System (UCS) 1.x before 1.2(1b) allows remote attackers to cause a denial of service (service outage) via a malformed request, aka Bug ID CSCtg48206. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
CVE ID: CVE-2013-1185 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T19:25:27.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: The web interface in the Manager component in Cisco Unified Computing System (UCS) 1.x and 2.x before 2.0(2m) allows remote attackers to obtain sensitive information by reading a (1) technical-support bundle file or (2) on-device configuration backup, aka Bug ID CSCtq86543. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
CVE ID: CVE-2013-1186 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T22:02:16.138Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Computing System (UCS) 1.x before 1.4(4) and 2.x before 2.0(2m) allows remote attackers to bypass KVM authentication via a crafted authentication request to a Cisco Integrated Management Controller (IMC), aka Bug ID CSCts53746. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-ucsmulti
CVE ID: CVE-2013-1187 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-17T01:15:31.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Connection Manager in Cisco Jabber Extensible Communications Platform (aka Jabber XCP) does not properly validate login data, which allows remote attackers to cause a denial of service (service crash) by sending a series of malformed login packets, aka Bug ID CSCts76762. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1187
CVE ID: CVE-2013-1188 State: PUBLISHED Published: 2013-05-16T01:00:00Z Last Updated: 2024-09-16T17:33:21.873Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Unified Communications Manager (CUCM) does not properly limit the rate of authentication attempts, which allows remote attackers to cause a denial of service (application slowdown) via a series of requests, aka Bug ID CSCud39515. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1188
CVE ID: CVE-2013-1189 State: PUBLISHED Published: 2013-04-11T10:00:00Z Last Updated: 2024-09-16T23:16:15.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco Universal Broadband (aka uBR) 10000 series routers, when an IPv4/IPv6 dual-stack modem is used, allow remote attackers to cause a denial of service (routing-engine reload) via unspecified changes to IP address assignments, aka Bug ID CSCue15313. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1189
CVE ID: CVE-2013-1190 State: PUBLISHED Published: 2013-08-01T16:00:00Z Last Updated: 2024-09-16T17:27:35.511Z Vendors: n/a Products: n/a Problem Types: n/a Description: The C-Series Rack Server component 1.4 in Cisco Unified Computing System (UCS) does not properly restrict inbound access to ports, which allows remote attackers to cause a denial of service (Integrated Management Controller reboot or hang) via crafted packets, as demonstrated by nmap, aka Bug ID CSCtx19850. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1190
CVE ID: CVE-2013-1191 State: PUBLISHED Published: 2014-05-24T01:00:00 Last Updated: 2024-08-06T14:57:02.960Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20140521-nxos
CVE ID: CVE-2013-1192 State: PUBLISHED Published: 2013-04-25T10:00:00Z Last Updated: 2024-09-16T20:22:27.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: The JAR files on Cisco Device Manager for Cisco MDS 9000 devices before 5.2.8, and Cisco Device Manager for Cisco Nexus 5000 devices, allow remote attackers to execute arbitrary commands on Windows client machines via a crafted element-manager.jnlp file, aka Bug IDs CSCty17417 and CSCty10802. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-fmdm
CVE ID: CVE-2013-1193 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-16T16:18:13.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Shell (SSH) implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly terminate sessions, which allows remote attackers to cause a denial of service (SSH service outage) by repeatedly establishing SSH connections, aka Bug IDs CSCue63881, CSCuf51892, CSCue78671, and CSCug26937. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1193
CVE ID: CVE-2013-1194 State: PUBLISHED Published: 2013-04-18T18:00:00 Last Updated: 2024-08-06T14:57:02.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ISAKMP implementation on Cisco Adaptive Security Appliances (ASA) devices generates different responses for IKE aggressive-mode messages depending on whether invalid VPN groups are specified, which allows remote attackers to enumerate groups via a series of messages, aka Bug ID CSCue73708. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1194 - http://archives.neohapsis.com/archives/bugtraq/2013-04/0198.html
CVE ID: CVE-2013-1195 State: PUBLISHED Published: 2013-04-24T10:00:00Z Last Updated: 2024-09-16T16:22:33.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The time-based ACL implementation on Cisco Adaptive Security Appliances (ASA) devices, and in Cisco Firewall Services Module (FWSM), does not properly handle periodic statements for the time-range command, which allows remote attackers to bypass intended access restrictions by sending network traffic during denied time periods, aka Bug IDs CSCuf79091 and CSCug45850. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1195
CVE ID: CVE-2013-1196 State: PUBLISHED Published: 2013-04-29T21:00:00Z Last Updated: 2024-09-16T18:43:32.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: The command-line interface in Cisco Secure Access Control System (ACS), Identity Services Engine Software, Context Directory Agent, Application Networking Manager (ANM), Prime Network Control System, Prime LAN Management Solution (LMS), Prime Collaboration, Unified Provisioning Manager, Network Services Manager, Prime Data Center Network Manager (DCNM), and Quad does not properly validate input, which allows local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCug29384, CSCug13866, CSCug29400, CSCug294
local users to obtain root privileges via unspecified vectors, aka Bug IDs CSCug29384, CSCug13866, CSCug29400, CSCug29406, CSCug29411, CSCug29413, CSCug29416, CSCug29418, CSCug29422, CSCug29425, and CSCug29426, a different issue than CVE-2013-1125. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1196
CVE ID: CVE-2013-1197 State: PUBLISHED Published: 2013-04-16T10:00:00Z Last Updated: 2024-09-16T23:01:32.354Z Vendors: n/a Products: n/a Problem Types: n/a Description: The XML parser in the server in Cisco Unified Presence (CUP) allows remote authenticated users to cause a denial of service (jabberd daemon crash) via crafted XML content in an XMPP message, aka Bug ID CSCue13912. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1197
CVE ID: CVE-2013-1198 State: PUBLISHED Published: 2013-04-29T01:00:00Z Last Updated: 2024-09-16T16:33:32.115Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in a Flash component in Cisco Unified Computing System (UCS) Central allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka Bug ID CSCud15430. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1198
CVE ID: CVE-2013-1199 State: PUBLISHED Published: 2013-04-18T18:00:00Z Last Updated: 2024-09-17T01:35:49.661Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the CIFS implementation in the rewriter module in the Clientless SSL VPN component on Cisco Adaptive Security Appliances (ASA) devices allows remote authenticated users to cause a denial of service (device reload) by accessing resources within multiple sessions, aka Bug ID CSCub58996. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1199
CVE ID: CVE-2013-1200 State: PUBLISHED Published: 2013-05-16T01:00:00Z Last Updated: 2024-09-17T02:36:53.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Session fixation vulnerability in Cisco Secure Access Control System (ACS) allows remote attackers to hijack web sessions via unspecified vectors, aka Bug ID CSCud95787. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1200
CVE ID: CVE-2013-1202 State: PUBLISHED Published: 2020-02-07T13:37:03 Last Updated: 2024-11-15T17:42:04.261Z Vendors: Cisco Products: Cisco ACE Problem Types: log retention DoS Description: Cisco ACE A2(3.6) allows log retention DoS. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20130516-CVE-2013-1202
CVE ID: CVE-2013-1203 State: PUBLISHED Published: 2013-06-18T14:00:00Z Last Updated: 2024-09-16T17:15:22.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco ASA CX Context-Aware Security Software allows remote attackers to cause a denial of service (device reload) via crafted TCP packets that appear to have been forwarded by a Cisco Adaptive Security Appliances (ASA) device, aka Bug ID CSCue88386. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1203
CVE ID: CVE-2013-1204 State: PUBLISHED Published: 2013-05-23T10:00:00Z Last Updated: 2024-09-17T02:02:10.048Z Vendors: n/a Products: n/a Problem Types: n/a Description: Memory leak in the SNMP process in Cisco IOS XR allows remote attackers to cause a denial of service (memory consumption or process reload) by sending many port-162 UDP packets, aka Bug ID CSCug80345. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1204
CVE ID: CVE-2013-1205 State: PUBLISHED Published: 2013-06-06T10:00:00Z Last Updated: 2024-09-17T02:20:44.376Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Event Center module in Cisco WebEx Meetings Server does not perform request authentication in all intended circumstances, which allows remote attackers to discover host keys and event passwords via crafted URLs, aka Bug ID CSCue62485. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1205
CVE ID: CVE-2013-1208 State: PUBLISHED Published: 2013-05-29T19:00:00Z Last Updated: 2024-09-17T02:57:07.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID CSCud14691. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1208
CVE ID: CVE-2013-1209 State: PUBLISHED Published: 2013-05-29T19:00:00Z Last Updated: 2024-09-16T22:02:13.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via crafted packets, aka Bug ID CSCud14710. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1209
CVE ID: CVE-2013-1210 State: PUBLISHED Published: 2013-05-29T19:00:00Z Last Updated: 2024-09-16T23:10:53.092Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the Virtual Ethernet Module (VEM) kernel driver for VMware ESXi in Cisco NX-OS on the Nexus 1000V, when STUN debugging is enabled, allows remote attackers to cause a denial of service (ESXi crash and purple screen of death) by sending crafted STUN packets to a VEM, aka Bug ID CSCud14825. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1210
CVE ID: CVE-2013-1211 State: PUBLISHED Published: 2013-05-29T19:00:00Z Last Updated: 2024-09-16T16:12:28.179Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cisco NX-OS on the Nexus 1000V does not properly handle authentication for Virtual Ethernet Module (VEM) to Virtual Supervisor Module (VSM) communication, which allows remote attackers to obtain VEM access via (1) spoofed STUN packets or (2) a crafted VMware ESXi instance, aka Bug ID CSCud14832. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1211
CVE ID: CVE-2013-1212 State: PUBLISHED Published: 2013-05-29T19:00:00Z Last Updated: 2024-09-16T20:57:55.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module (VSM) to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837. Additional Analyst Notes: - CVE Program Container: References: - http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1212