8.3

CVE-2013-1178

Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cisco ≫ Nx-os Version 4.0
Cisco ≫ Nx-os Version 4.2
Cisco ≫ Nx-os Version 5.0
Cisco ≫ Nx-os Version 5.1
Cisco ≫ Nx-os Version 5.2
Cisco ≫ Nx-os Version 6.1
Cisco ≫ Nexus 7000 Version -
Cisco ≫ Nexus 7000 10-slot Version -
Cisco ≫ Nexus 7000 18-slot Version -
Cisco ≫ Nexus 7000 9-slot Version -
Cisco ≫ Nx-os Version 4.0
Cisco ≫ Nx-os Version 4.2
Cisco ≫ Nx-os Version 5.0
Cisco ≫ Nx-os Version 5.1
Cisco ≫ Nx-os Version 5.2
Cisco ≫ Nx-os Version 4.0
Cisco ≫ Nx-os Version 4.2
Cisco ≫ Nx-os Version 5.0
Cisco ≫ Nx-os Version 5.1
Cisco ≫ Nexus 5000 Version -
Cisco ≫ Nexus 5010 Version -
Cisco ≫ Nexus 5020 Version -
Cisco ≫ Nexus 5548p Version -
Cisco ≫ Nexus 5548up Version -
Cisco ≫ Nexus 5596up Version -
Cisco ≫ Nx-os Version <= 4.1.\(2\)
Cisco ≫ Nx-os Version 4.0
Cisco ≫ Nexus 4001i Version -
Cisco ≫ Nx-os Version 5.0
Cisco ≫ Nexus 3016q Version -
Cisco ≫ Nexus 3048 Version -
Cisco ≫ Nexus 3064t Version -
Cisco ≫ Nexus 3064x Version -
Cisco ≫ Nexus 3548 Version -
Cisco ≫ Nx-os Version 4.0
Cisco ≫ Nx-os Version 4.2
Cisco ≫ Nexus 1000v Version -
Cisco ≫ Cg-os Version <= cg4
Cisco ≫ Cg-os Version cg1
Cisco ≫ Cg-os Version cg2
Cisco ≫ Cg-os Version cg3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.37% 0.684
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 8.3 6.5 10
AV:A/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
Vendor Advisory