Vulnerability Details : CVE-2013-1178
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2013-1178
Probability of exploitation activity in the next 30 days: 0.07%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 30 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2013-1178
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
8.3
|
HIGH | AV:A/AC:L/Au:N/C:C/I:C/A:C |
6.5
|
10.0
|
NIST |
CWE ids for CVE-2013-1178
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2013-1178
-
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
Multiple Vulnerabilities in Cisco NX-OS-Based ProductsVendor Advisory
Products affected by CVE-2013-1178
- cpe:2.3:h:cisco:mds_9000:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(2b\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(2\)n2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(2\)n1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(2a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(2a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(2\)n2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n1\(1c\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(5\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n1\(1b\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.0\(3\)n2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(1\)sv1\(4a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(1\)sv1\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(1a\)n1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(0\)n1\(2a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(0\)n1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(0\)n1\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(4\)sv1\(3b\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(4\)sv1\(3c\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(4\)sv1\(3d\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(1\)n2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(4\)sv1\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(4\)sv1\(3a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1\(3\)n1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(1a\)n2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(1a\)n1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(1\)n2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1\(3\)n2\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(4\)sv1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(4\)sv1\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1\(3\)n1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0\(1a\)n2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(1\)n1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1\(3\)n2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(3\)n1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(3\)n1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(6\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(5\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1.\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1.\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1.\(5\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(1a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2.\(2a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.1.\(4\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(6\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.2:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:6.1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(1\)sv1\(5.1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:6.0\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:6.0\(2\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.2\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.2\(3\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.2\(3a\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:5.1\(1\):*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:nx-os:4.2\(8\):*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_5000:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_3000:*:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_1000v:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_5596up:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_5548p:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_5548up:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_5020:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_5010:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000_18-slot:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000_10-slot:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_7000_9-slot:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_4001i:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_3548:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_3016q:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_3048:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_3064x:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:nexus_3064t:-:*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System SoftwareVersions up to, including, (<=) 2.0\(1x\)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:*:*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 2.0(1q)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0\(1q\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(1j)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(1j\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 2.0(1w)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0\(1w\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(3l)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(3l\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(3i)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(3i\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(1m)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(1m\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1y)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1y\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.0(2k)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.0\(2k\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.1(1m)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.1\(1m\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.2(1)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2\(1\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.2cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2:*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 2.0(1t)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0\(1t\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1p)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1p\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1n)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1n\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1w)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1w\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1q)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1q\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(3q)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(3q\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.2(1d)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2\(1d\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.2(1a)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.2\(1a\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.1cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.1:*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(4j)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(4j\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(4k)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(4k\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1o)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1o\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(4g)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(4g\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(4f)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(4f\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(3y)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(3y\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(3u)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(3u\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 2.0(1s)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:2.0\(1s\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1m)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1m\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1c)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1c\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.3(1t)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.3\(1t\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(4i)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(4i\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(3s)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(3s\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.4(3m)cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.4\(3m\):*:*:*:*:*:*:*
- Cisco » Unified Computing System Infrastructure And Unified Computing System Software » Version: 1.0cpe:2.3:o:cisco:unified_computing_system_infrastructure_and_unified_computing_system_software:1.0:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:unified_computing_system_6296up_fabric_interconnect:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:unified_computing_system_6248up_fabric_interconnect:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:unified_computing_system_6140xp_fabric_interconnect:-:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:unified_computing_system_6120xp_fabric_interconnect:-:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cg-os:*:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cg-os:cg1:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cg-os:cg3:*:*:*:*:*:*:*
- cpe:2.3:o:cisco:cg-os:cg2:*:*:*:*:*:*:*
- cpe:2.3:h:cisco:connected_grid_router_1000:-:*:*:*:*:*:*:*