CVE-2012-4135
N/A
Published: December 21, 2013 at 11:00 AM UTC
Updated: June 16, 2026 at 11:44 PM UTC
1 product affected across 1 vendorNx OS
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.5%
Description
Directory traversal vulnerability in filesys in Cisco NX-OS 6.1(2) and earlier allows local users to access arbitrary files via crafted command-line arguments during a delete action, aka Bug IDs CSCty07270, CSCty07271, CSCty07273, and CSCty07275.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v ≤ 6.1(2)4.04.0(0)n1(1a)4.0(0)n1(2)4.0(0)n1(2a)4.0(1a)n1(1)4.0(1a)n1(1a)4.0(1a)n2(1)4.0(1a)n2(1a)4.0(4)sv1(1)4.0(4)sv1(2)4.0(4)sv1(3)4.0(4)sv1(3a)4.0(4)sv1(3b)4.0(4)sv1(3c)4.0(4)sv1(3d)4.1(3)n1(1)4.1(3)n1(1a)4.1(3)n2(1)4.1(3)n2(1a)4.1.(2)4.1.(3)4.1.(4)4.1.(5)4.24.2(1)4.2(1)n1(1)4.2(1)n2(1)4.2(1)n2(1a)4.2(1)sv1(4)4.2(1)sv1(4a)4.2(1)sv1(5.1)4.2(2)4.2(3)4.2(4)4.2(6)4.2(8)4.2.(2a)5.05.0(2)5.0(2)n1(1)5.0(2)n2(1)5.0(2)n2(1a)5.0(2a)5.0(3)5.0(3)n1(1)5.0(3)n1(1a)5.0(3)n1(1b)5.0(3)n1(1c)5.0(3)n2(1)5.0(3)n2(2)5.0(3)n2(2a)5.0(3)n2(2b)5.0(3)u1(1a)5.0(3)u1(1b)5.0(3)u1(1d)5.0(3)u1(2)5.0(3)u1(2a)5.0(3)u2(1)5.0(3)u2(2)5.0(3)u2(2a)5.0(3)u2(2b)5.0(3)u2(2c)5.0(3)u2(2d)5.0(3)u3(1)5.0(3)u3(2)5.0(3)u3(2a)5.0(3)u3(2b)5.0(3)u4(1)5.0(3)u5(1)5.0(3)u5(1a)5.0(3)u5(1b)5.0(3)u5(1c)5.0(3)u5(1d)5.0(3)u5(1e)5.0(5)5.15.1(1)5.1(1a)5.1(2)5.1(3)5.1(3)n1(1)5.1(3)n1(1a)5.1(4)5.1(5)5.1(6)5.25.2(1)5.2(3)5.2(3a)5.2(4)5.2(5)5.2(7)5.2(9)6.0(1)6.0(2)6.16.1(1)
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (2)
Vendor Advisoryx_refsource_CISCO
Source: [email protected]
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2012-4135x_refsource_CONFIRMVendor Advisory
Source: [email protected]
http://tools.cisco.com/security/center/viewAlert.x?alertId=32237Quick Info
StatusMODIFIED
CWE
CWE-22
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card