CVE-2013-1208: The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor...

Security readout for executives and security teams

Cisco Nexus 1000V had an NX-OS encryption handling flaw in VSM-to-VEM communication. An attacker with certain Layer 2 or Layer 3 access could intercept or alter traffic. Public data provided here does not include CVSS, affected versions, or confirmed fixes. Exposure is likely limited to organizations that deployed Cisco Nexus 1000V with NX-OS and VSM/VEM components. The source bundle does not identify affected versions, CPEs, or deployment-specific conditions. Assign a networking owner to confirm whether Nexus 1000V exists in the environment. If present, validate Cisco guidance and segmentation because the impact is traffic interception or modification, but public severity data is incomplete. Mitigation focus: Check Cisco advisory and bug CSCud14691 for affected releases and fixed software guidance.; Inventory Cisco Nexus 1000V deployments and confirm whether VSM/VEM components are present.; Restrict Layer 2 and Layer 3 access to VSM/VEM communication paths where feasible..

Prepared

Jun 14, 2026, 22:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.