CVE-2012-4135

Cisco NX-OS < 6.1(2) - Local Path Traversal via Filesys Delete Command

Title source: llm

Description

Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.

References (2)

Core 2

Core References

Vendor Advisory vendor-advisory x_refsource_cisco

http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4135

Vendor Advisory x_refsource_confirm

http://tools.cisco.com/security/center/viewAlert.x?alertId=32237

Scores

EPSS 0.0047

EPSS Percentile 37.3%

Details

CWE

CWE-22

Status published

Products (50)

cisco/nx-os 4.0

cisco/nx-os 4.0\(0\)n1\(1a\)

cisco/nx-os 4.0\(0\)n1\(2\)

cisco/nx-os 4.0\(0\)n1\(2a\)

cisco/nx-os 4.0\(1a\)n1\(1\)

cisco/nx-os 4.0\(1a\)n1\(1a\)

cisco/nx-os 4.0\(1a\)n2\(1\)

cisco/nx-os 4.0\(1a\)n2\(1a\)

cisco/nx-os 4.0\(4\)sv1\(1\)

cisco/nx-os 4.0\(4\)sv1\(2\)

... and 40 more

Published Dec 21, 2013

Tracked Since Feb 18, 2026