Vulnerability record · CVE-2013-5556 · published 18 November 2013

CVE-2013-5556: Cisco nexus 1000v permissions and access controls vulnerability

Cisco · Nexus 1000v

The license-installation module on the Cisco Nexus 1000V switch 4.2(1)SV1(5.2b) and earlier for VMware vSphere, Cisco Nexus 1000V switch 5.2(1)SM1(5.1) for Microsoft Hyper-V, and Cisco Virtual Security Gateway 4.2(1)VSG1(1) for Nexus 1000V switches allows local users to gain privileges and execute arbitrary commands via crafted "install all iso" arguments, aka Bug ID CSCui21340.

6.8 CVSS 2.0 Medium EPSS 0.32% · top 78.1% CWE-264 · Permissions and access controls

6.8CVSS 2.0 base score

0.32%EPSS exploitation probability, 30 days

NoNot in CISA KEV

1Affected product versions listed by NVD

4References

16 Jun 2026Last modified by NVD

Description

AV:L/AC:L/Au:S/C:C/I:C/A:C

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Nexus 1000v Cisco

References

Link	Tags
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556	Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=31774	Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5556	Vendor Advisory
http://tools.cisco.com/security/center/viewAlert.x?alertId=31774	Vendor Advisory

Track CVE-2013-5556 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.3CVE-2013-1178Cisco nx-os memory buffer overflow vulnerabilityMultiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x…EPSS 1.4%25 Apr 2013 7.8CVE-2012-0352Cisco nx-os vulnerabilityCisco NX-OS 4.2.x before 4.2(1)SV1(5.1) on Nexus 1000v series switches; 4.x and 5.0.x before 5.0(2)N1(1) on Nexus 5000 series switches; and 4.2.x bef…EPSS 1.3%16 Feb 2012 6.8CVE-2013-3400Cisco nx-os improper input validation vulnerabilityThe license-installation module in Cisco NX-OS on Nexus 1000V devices allows local users to execute arbitrary commands via crafted "install license" …EPSS 0.38%10 Jul 2013 5.8CVE-2013-1212Cisco nx-os vulnerabilityThe SSL functionality in Cisco NX-OS on the Nexus 1000V does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoo…EPSS 0.67%29 May 2013 5.0CVE-2015-0775Cisco nx-os vulnerabilityThe banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) on Nexus 5…EPSS 3.0%12 Jun 2015 5.0CVE-2013-1213Cisco nx-os vulnerabilityCisco NX-OS on the Nexus 1000V does not assign the proper priority to heartbeat messages from a Virtual Ethernet Module (VEM) to a Virtual Supervisor…EPSS 1.8%29 May 2013 5.1CVE-2015-3246libuser userhelper direct /etc/passwd write race conditionlibuser before 0.56.13-8 and 0.60 before 0.60-7, as used by the userhelper program in the usermode package, modifies /etc/passwd directly instead of …KEVEPSS 8.8%analysed11 Aug 2015 6.6CVE-2015-1769Windows Mount Manager symlink mishandling allows local privilege escalationThe Windows Mount Manager mishandles symbolic links, allowing a crafted USB device to trigger arbitrary code execution. Because the flaw is in a core…KEVEPSS 4.1%analysed15 Aug 2015

Source: NIST National Vulnerability Database (record CVE-2013-5556), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.