CVEvulnerability
CVE-2012-4135
4.6 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2013-12-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:S/C:N/I:C/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.
Affected configurations
• cisco nx-os (<= 6.1\(2\))
• cisco nx-os 4.0
• cisco nx-os 4.0\(0\)n1\(1a\)
• cisco nx-os 4.0\(0\)n1\(2\)
• cisco nx-os 4.0\(0\)n1\(2a\)
• cisco nx-os 4.0\(1a\)n1\(1\)
• cisco nx-os 4.0\(1a\)n1\(1a\)
• cisco nx-os 4.0\(1a\)n2\(1\)
• cisco nx-os 4.0\(1a\)n2\(1a\)
• cisco nx-os 4.0\(4\)sv1\(1\)
• cisco nx-os 4.0\(4\)sv1\(2\)
• cisco nx-os 4.0\(4\)sv1\(3\)
• cisco nx-os 4.0\(4\)sv1\(3a\)
• cisco nx-os 4.0\(4\)sv1\(3b\)
• cisco nx-os 4.0\(4\)sv1\(3c\)
• cisco nx-os 4.0\(4\)sv1\(3d\)
• cisco nx-os 4.1\(3\)n1\(1\)
• cisco nx-os 4.1\(3\)n1\(1a\)
• cisco nx-os 4.1\(3\)n2\(1\)
• cisco nx-os 4.1\(3\)n2\(1a\)
• cisco nx-os 4.1.\(2\)
• cisco nx-os 4.1.\(3\)
• cisco nx-os 4.1.\(4\)
• cisco nx-os 4.1.\(5\)
• cisco nx-os 4.2
• cisco nx-os 4.2\(1\)
• cisco nx-os 4.2\(1\)n1\(1\)
• cisco nx-os 4.2\(1\)n2\(1\)
• cisco nx-os 4.2\(1\)n2\(1a\)
• cisco nx-os 4.2\(1\)sv1\(4\)
• cisco nx-os 4.2\(1\)sv1\(4a\)
• cisco nx-os 4.2\(1\)sv1\(5.1\)
• cisco nx-os 4.2\(2\)
• cisco nx-os 4.2\(3\)
• cisco nx-os 4.2\(4\)
• cisco nx-os 4.2\(6\)
• cisco nx-os 4.2\(8\)
• cisco nx-os 4.2.\(2a\)
• cisco nx-os 5.0
• cisco nx-os 5.0\(2\)
• cisco nx-os 5.0\(2\)n1\(1\)
• cisco nx-os 5.0\(2\)n2\(1\)
• cisco nx-os 5.0\(2\)n2\(1a\)
• cisco nx-os 5.0\(2a\)
• cisco nx-os 5.0\(3\)
• cisco nx-os 5.0\(3\)n1\(1\)
• cisco nx-os 5.0\(3\)n1\(1a\)
• cisco nx-os 5.0\(3\)n1\(1b\)
• cisco nx-os 5.0\(3\)n1\(1c\)
• cisco nx-os 5.0\(3\)n2\(1\)
• cisco nx-os 5.0\(3\)n2\(2\)
• cisco nx-os 5.0\(3\)n2\(2a\)
• cisco nx-os 5.0\(3\)n2\(2b\)
• cisco nx-os 5.0\(3\)u1\(1a\)
• cisco nx-os 5.0\(3\)u1\(1b\)
• cisco nx-os 5.0\(3\)u1\(1d\)
• cisco nx-os 5.0\(3\)u1\(2\)
• cisco nx-os 5.0\(3\)u1\(2a\)
• cisco nx-os 5.0\(3\)u2\(1\)
• cisco nx-os 5.0\(3\)u2\(2\)
… and 38 more
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4135 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32237 Vendor Advisory
- http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4135 Vendor Advisory
- http://tools.cisco.com/security/center/viewAlert.x?alertId=32237 Vendor Advisory