CVE-2013-1212 - The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module (VSM) to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837

Back Back to CVE browser

MEDIUM

The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module (VSM) to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837

Published May 29, 2013

5.8

MEDIUM

CVSS 2.0

EPSS 0.67%

Description

The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module (VSM) to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-310

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1212
vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1252
Advisory

Link	Providers	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1212		vendor-advisoryx_refsource_CISCOVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2013-1252		Advisory