CVE-2012-4090

MediumCVSS 4.0/10Last modified Jun 16, 2026

Description

The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain sensitive configuration-file information by leveraging the network-operator role, aka Bug ID CSCti09089.

Metrics

CVSS 2.0 4.0/10AV:N/AC:L/Au:S/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published: Oct 5, 2013
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-40915.0The RIP service engine in Cisco NX-OS allows remote attackers to cause a denial of service (engine restart) via a malformed (1) RIPv4 or (2)CVE-2012-40925.8The management interface in the Central Software component in Cisco Unified Computing System (UCS) does not properly validate the identity o CVE-2012-40934.6The Manager component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service via an invalid Smart Call Home CVE-2012-40945.4Buffer overflow in the Smart Call Home feature in the fabric interconnect in Cisco Unified Computing System (UCS) allows remote attackers to CVE-2012-40955.5The local file editor in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges, an CVE-2012-40966.2The local file editor in the Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privil CVE-2012-40974.3The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of CVE-2012-40985.0The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP ser CVE-2012-40994.3The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP ser CVE-2012-41026.8The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privil CVE-2012-41036.8ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding CVE-2012-41046.6Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (