CVE-2012-4098

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP service reset and resync) via a malformed UPDATE message, aka Bug ID CSCtn13055.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Oct 5, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2012

CVE-2012-40994.3The BGP implementation in Cisco NX-OS does not properly filter AS paths, which allows remote attackers to cause a denial of service (BGP serCVE-2012-41026.8The activate firmware command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilCVE-2012-41036.8ethanalyzer in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding CVE-2012-41046.6Absolute path traversal vulnerability in the image-download process in the fabric-interconnect component in Cisco Unified Computing System (CVE-2012-41054.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to cause a denial of service (component crash) CVE-2012-41066.8The fabric-interconnect component in Cisco Unified Computing System (UCS) uses the same privilege level for execution of every script, whichCVE-2012-41074.6The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary commanCVE-2012-41086.8The fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrary operatCVE-2012-41096.8The clear sshkey command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges CVE-2012-41106.8run-script in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privileges by embedding cCVE-2012-41116.8The create certreq command in the fabric-interconnect component in Cisco Unified Computing System (UCS) allows local users to gain privilegeCVE-2012-41126.8The Baseboard Management Controller (BMC) in Cisco Unified Computing System (UCS) allows local users to gain privileges and execute arbitrar
CVE-2012-4098: Medium severity, CVSS 5.0 | Vulnix