CVE-2012-4097

MediumCVSS 4.3/10Last modified Jun 16, 2026

Description

The BGP implementation in Cisco NX-OS does not properly filter segment types in AS paths, which allows remote attackers to cause a denial of service (BGP service reset) via a malformed UPDATE message, aka Bug ID CSCtn13043.

Metrics

CVSS 2.0 4.3/10AV:N/AC:M/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Oct 14, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-40985.0The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP serCVE-2012-40994.3The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP serCVE-2012-41026.8The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilCVE-2012-41036.8ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding CVE-2012-41046.6Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (CVE-2012-41054.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) CVE-2012-41066.8The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, whichCVE-2012-41074.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commanCVE-2012-41086.8The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operatCVE-2012-41096.8The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges CVE-2012-41106.8run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding cCVE-2012-41116.8The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilege
CVE-2012-4097: Medium severity, CVSS 4.3 | Vulnix