CVE-2012-3051
CVE-2012-3051 is a medium-severity vulnerability in Cisco Nx-os with a CVSS 2.0 base score of 6.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 6.1)
- EPSS exploit prediction: 1% (48th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Cisco Nx-os
- Published:
- Last modified:
Description
Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822.
Frequently asked questions
- What is CVE-2012-3051?
- Cisco NX-OS 5.2 and 6.1 on Nexus 7000 series switches allows remote attackers to cause a denial of service (process crash or packet loss) via a large number of ARP packets, aka Bug ID CSCtr44822.
- How severe is CVE-2012-3051?
- CVE-2012-3051 has a CVSS 2.0 base score of 6.1, rated medium severity.
- Is CVE-2012-3051 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (48th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2012-3051?
- CVE-2012-3051 primarily affects Cisco Nx-os. In total, 6 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2012-3051?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2012-3051 published?
- CVE-2012-3051 was published on 2012-09-16 and last updated on 2026-06-16.
References
- http://secunia.com/advisories/50671
- http://www.cisco.com/en/US/docs/switches/datacenter/sw/5_x/nx-os/release/notes/52_nx-os_release_note.html
- http://www.securityfocus.com/bid/55600
Affected products (6)
- cpe:2.3:o:cisco:nx-os:5.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:6.1:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*
More vulnerabilities in Cisco Nx-os
- CVE-2021-1361 — Critical (CVSS 9.8): A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and…
- CVE-2018-0310 — Critical (CVSS 9.8): A vulnerability in the Cisco Fabric Services component of Cisco FXOS Software and Cisco NX-OS Software could allow an…
- CVE-2018-0301 — Critical (CVSS 9.8): A vulnerability in the NX-API feature of Cisco NX-OS Software could allow an unauthenticated, remote attacker to craft…
- CVE-2016-1453 — Critical (CVSS 9.8): Buffer overflow in the Overlay Transport Virtualization (OTV) GRE feature in Cisco NX-OS 5.0 through 7.3 on Nexus 7000…
- CVE-2016-1341 — Critical (CVSS 9.8): Cisco NX-OS 7.0(1)N1(1), 7.0(1)N1(3), and 7.0(4)N1(1) on Nexus 2000 Fabric Extender devices has a blank root password,…
- CVE-2015-4235 — Critical (CVSS 9.0): Cisco Application Policy Infrastructure Controller (APIC) devices with software before 1.0(3o) and 1.1 before 1.1(1j)…