Summary
generated automatically from NVD dataCisco NX-OS on the Nexus 1000V contains a flaw in its SSL functionality, which fails to properly validate X.509 certificates (weakness class CWE-310). A man-in-the-middle attacker presenting a crafted certificate could spoof servers and then intercept or alter traffic between the Virtual Supervisor Module (VSM) and VMware vCenter. The issue is tracked as Cisco Bug ID CSCud14837 and has a CVSS v2.0 score of 5.8 (MEDIUM).
NVD description
The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual Supervisor Module (VSM) to VMware vCenter communication, via a crafted certificate, aka Bug ID CSCud14837.
EPSS · FIRST.org
0.67%probability of exploitation in the next 30 days
Higher than 51% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-10-18, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 29 mai 2013
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- psirt@cisco.com
Affected products
Weaknesses (CWE)
References (2)
Similar CVEs
Other vulnerabilities of type CWE-310
Monitor your products
Get automatic alerts for every new CVE affecting your equipment.