Unscored severity · published Apr 25, 2013
CVE-2013-1178
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CG
Cg-os · Cisco
through cg4; cg1; cg2; cg3 · source: NVD
CG
Connected Grid Router 1000 · Cisco
All versions, or not specified · source: NVD
M9
Mds 9000 · Cisco
All versions, or not specified · source: NVD
N1
Nexus 1000v · Cisco
All versions, or not specified · source: NVD
N3
Nexus 3000 · Cisco
All versions, or not specified · source: NVD
N3
Nexus 3016q · Cisco
All versions, or not specified · source: NVD
N3
Nexus 3048 · Cisco
All versions, or not specified · source: NVD
N3
Nexus 3064t · Cisco
All versions, or not specified · source: NVD
N3
Nexus 3064x · Cisco
All versions, or not specified · source: NVD
N3
Nexus 3548 · Cisco
All versions, or not specified · source: NVD
N4
Nexus 4001i · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5000 · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-1178
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-1178
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
More from Cg-os
–
CVE-2014-3261
Buffer overflow in the Smart Call Home implementation in Cisco NX-OS on Fabric Interconnects in Cisco Unified Computing System 1.4 before 1.4(1i), NX-OS 5.0 before 5.0(3)U2(2) on…