Description
The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.2(1)VSG1(1) for Nexus 1000V switches allows local users to gain privileges and execute arbitrary commands via crafted "install all iso" arguments, aka Bug ID CSCui21340.
References (2)
Core 2
Core References
Vendor Advisory vendor-advisory
x_refsource_cisco
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556
Vendor Advisory x_refsource_confirm
http://tools.cisco.com/security/center/viewAlert.x?alertId=31774
Scores
EPSS
0.0032
EPSS Percentile
23.7%
Details
CWE
CWE-264
Status
published
Products (9)
cisco/nexus_1000v
4.2\(1\)vsg1\(1\)
cisco/nexus_1000v
5.2\(1\)sm1\(5.1\)
cisco/nexus_1000v
4.2\(1\)_sv1\(4\)
cisco/nexus_1000v
4.2\(1\)_sv1\(4a\)
cisco/nexus_1000v
4.2\(1\)_sv1\(4b\)
cisco/nexus_1000v
4.2\(1\)sv1\(5.1\)
cisco/nexus_1000v
4.2\(1\)sv1\(5.1a\)
cisco/nexus_1000v
4.2\(1\)sv1\(5.2\)
cisco/nexus_1000v
< 4.2\(1\)sv1\(5.2b\)
Published
Nov 18, 2013
Tracked Since
Feb 18, 2026