CVE-2012-6396

Severity Score

4.9

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Cisco NX-OS on Nexus 7000 series switches does not properly handle certain line-card replacements, which might allow remote authenticated users to cause a denial of service (memory consumption) via a crafted configuration that references interfaces that do not exist on the new card, aka Bug ID CSCud44300.

Cisco NX-OS en las series de switches Nexus 7000 no manejan remplazamientos line-card, lo que permite a usuarios autenticados de forma remota causar una denegación de servicios (consumo de memoria) a través de una configuración manipulada que referencia interfaces que no existen en la nueva tarjeta, también conocido como Bug ID CSCud44300

*Credits: N/A

CVSS Scores

NISTv2 4.9

Attack Vector

Network

Attack Complexity

High

Authentication

Single

Confidentiality

None

Integrity

None

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2012-12-16 CVE Reserved
2013-01-19 CVE Published
2023-03-07 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-399: Resource Management Errors

CAPEC

References (2)

URL	Tag	Source
http://www.securitytracker.com/id/1028018	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-6396	2013-02-02

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 7000 Search vendor "Cisco" for product "Nexus 7000"	-	-	Affected
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 7000 10-slot Search vendor "Cisco" for product "Nexus 7000 10-slot"	-	-	Affected
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 7000 18-slot Search vendor "Cisco" for product "Nexus 7000 18-slot"	-	-	Affected
Cisco Search vendor "Cisco"	Nx-os Search vendor "Cisco" for product "Nx-os"	-	-	Affected	in	Cisco Search vendor "Cisco"	Nexus 7000 9-slot Search vendor "Cisco" for product "Nexus 7000 9-slot"	-	-	Affected