Read the docs
TI-2013-01037 Aliases CVE-2013-1191GHSA-9cw5-jjwx-8c3g

Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and…

Priority LOW 35CWE-264Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
Security bypass
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-264.

Summary

Cisco NX-OS 6.1 before 6.1(5) on Nexus 7000 devices, when local authentication and multiple VDCs are enabled, allows remote authenticated users to gain privileges within an unintended VDC via crafted SSH key data in an SSH session to a management interface, aka Bug ID CSCud88400.

Why it matters now

EPSS 0.01874 79th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 10

CPEVersionsRoleVendor
cpe:2.3:o:cisco:nx-os:6.1:*:*:*:*:*:*:*6.1VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.1\(1\):*:*:*:*:*:*:*6.1(1)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.1\(2\):*:*:*:*:*:*:*6.1(2)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.1\(3\):*:*:*:*:*:*:*6.1(3)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.1\(4\):*:*:*:*:*:*:*6.1(4)VulnerableCisco
cpe:2.3:o:cisco:nx-os:6.1\(4a\):*:*:*:*:*:*:*6.1(4a)VulnerableCisco
cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*not specified by NVDVulnerableCisco
  • cpe:2.3:o:cisco:nx-os:6.1:*:*:*:*:*:*:* Versions 6.1 Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.1\(1\):*:*:*:*:*:*:* Versions 6.1(1) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.1\(2\):*:*:*:*:*:*:* Versions 6.1(2) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.1\(3\):*:*:*:*:*:*:* Versions 6.1(3) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.1\(4\):*:*:*:*:*:*:* Versions 6.1(4) Vulnerable ·Cisco
  • cpe:2.3:o:cisco:nx-os:6.1\(4a\):*:*:*:*:*:*:* Versions 6.1(4a) Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco
  • cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Cisco

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2013-1191
  2. 2026-10-03 Alias added: GHSA-9cw5-jjwx-8c3g

References

Advisory 1

  • TI-2013-01026 Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and… CVSS 2.0HIGH 9.0
  • TI-2013-01025 Multiple buffer overflows in the (1) SNMP and (2) License Manager implementations in… CVSS 2.0HIGH 9.0
  • TI-2013-01024 Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco… CVSS 2.0HIGH 8.3
  • TI-2014-01744 The Message Transfer Service (MTS) in Cisco NX-OS before 6.2(7) on MDS 9000 devices and… CVSS 2.0HIGH 7.8
  • TI-2012-02173 Cisco NX-OS 4.2, 5.0, 5.1, and 5.2 on Nexus 7000 series switches, when the High… CVSS 2.0HIGH 7.8
  • TI-2009-00603 Unspecified vulnerability in Cisco NX-OS before 4.0(1a)N2(1), when running on Nexus 5000… CVSS 2.0HIGH 7.8
See all 14 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences