Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2012-6396


Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID CSCud44300.


Published

2013-01-19T20:55:01.043

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.9 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:S/C:N/I:N/A:C

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: SINGLE
  • Confidentiality Impact: NONE
  • Integrity Impact: NONE
  • Availability Impact: COMPLETE
Exploitability Score

3.9

Impact Score

6.9

Weaknesses
  • Type: Primary
    CWE-399

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco nx-os - Yes
Hardware cisco nexus_7000 - Yes
Hardware cisco nexus_7000_10-slot - Yes
Hardware cisco nexus_7000_18-slot - Yes
Hardware cisco nexus_7000_9-slot - Yes

References