Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-m4mh-hhpp-pm37

Опубликовано: 17 мая 2022
Источник: github
Github: Не прошло ревью

Описание

The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via crafted packets, aka Bug ID CSCud14710.

The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via crafted packets, aka Bug ID CSCud14710.

EPSS

Процентиль: 22%
0.00071
Низкий

Дефекты

CWE-287

Связанные уязвимости

nvd
больше 12 лет назад

The encryption functionality in the Virtual Supervisor Module (VSM) to Virtual Ethernet Module (VEM) communication component in Cisco NX-OS on the Nexus 1000V does not properly authenticate VSM/VEM packets, which allows remote attackers to disable packet-level encryption and integrity protection via crafted packets, aka Bug ID CSCud14710.

EPSS

Процентиль: 22%
0.00071
Низкий

Дефекты

CWE-287