Cisco Nexus 1000v vulnerabilities

7 CVEs affecting Cisco Nexus 1000v, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-0775, published 2015-06-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-0775, published 2015-06-12. Medium severity, CVSS 5.0. EPSS: 3% chance of exploitation in the next 30 days. The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5000 devices, 6.2(11) on MDS 9000 devices, 6.2(12)…
CVE-2013-1213, published 2013-05-29. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Cisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor Module (VSM), which allows remote attackers to…
CVE-2013-1178, published 2013-04-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x…
CVE-2012-0352, published 2012-02-16. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Cisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x before 4.2.8, 5.0.x before 5.0.5, and 5.1.x before…
CVE-2013-1212, published 2013-05-29. Medium severity, CVSS 5.8. EPSS: 0.7% chance of exploitation in the next 30 days. The SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof servers, and intercept or modify Virtual…
CVE-2013-3400, published 2013-07-10. Medium severity, CVSS 6.8. EPSS: 0.4% chance of exploitation in the next 30 days. The license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" arguments, aka Bug ID CSCuh30824.
CVE-2013-5556, published 2013-11-18. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and Cisco Virtual…