CVE-2013-1191: cisco nexus_7000_firmware

Vulnerability summary

CVE-2013-1191 is a high (CVSS 7.1) vulnerability in cisco nexus_7000_firmware. EPSS estimates a 1.87% chance of exploitation in the next 30 days, higher than 79% of scored vulnerabilities.

Timeline

1. 24-05-2014
   PublishedVulnerability first disclosed.
2. 06-08-2024
   Last modifiedVulnerability information updated.

Description

Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.