CVE-2012-4090: The management interface in Cisco NX-OS on Nexus 7000 devices allows remote authenticated users to obtain s...

Security readout for executives and security teams

CVE-2012-4090 is an information disclosure issue in the Cisco NX-OS management interface on Nexus 7000 devices. A remote authenticated user with the network-operator role could obtain sensitive configuration-file information. The issue matters most where Nexus 7000 management access is broad or operator accounts are widely assigned. Exposure is likely limited to organizations running Cisco Nexus 7000 devices with affected NX-OS management interfaces and users assigned the network-operator role. Risk increases if management interfaces are reachable beyond tightly controlled administrative networks. Treat as a targeted network-infrastructure exposure issue. It is not documented here as actively exploited, but disclosure of core switch configuration can materially aid follow-on compromise. Prioritize environments where management access or operator roles are broadly granted. Mitigation focus: Review Cisco Security Notice CVE-2012-4090 for affected releases and fixed software guidance.; Restrict Nexus 7000 management interfaces to trusted administrative networks.; Audit network-operator accounts and remove unnecessary role assignments..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.