CVE-2013-1178
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.
Published:Apr 25, 2013
Last Modified:Apr 11, 2025
EPS:Apr 25, 2013
EPSS Score:0.01639
CVSS Score:8.3
Affected Products
Vendor
Product
Action
Vendor
Cisco
Product
Cg-os
Cisco
Cg-os
Vendor
Cisco
Product
Connected Grid Router 1000
Cisco
Connected Grid Router 1000
Vendor
Cisco
Product
Mds 9000
Cisco
Mds 9000
Vendor
Cisco
Product
Nexus 1000v
Cisco
Nexus 1000v
Vendor
Cisco
Product
Nexus 3000
Cisco
Nexus 3000
Vendor
Cisco
Product
Nexus 3016q
Cisco
Nexus 3016q
Vendor
Cisco
Product
Nexus 3048
Cisco
Nexus 3048
Vendor
Cisco
Product
Nexus 3064t
Cisco
Nexus 3064t
Vendor
Cisco
Product
Nexus 3064x
Cisco
Nexus 3064x
Vendor
Cisco
Product
Nexus 3548
Cisco
Nexus 3548
Vendor
Cisco
Product
Nexus 4001i
Cisco
Nexus 4001i
Vendor
Cisco
Product
Nexus 5000
Cisco
Nexus 5000
Vendor
Cisco
Product
Nexus 5010
Cisco
Nexus 5010
Vendor
Cisco
Product
Nexus 5020
Cisco
Nexus 5020
Vendor
Cisco
Product
Nexus 5548p
Cisco
Nexus 5548p
Vendor
Cisco
Product
Nexus 5548up
Cisco
Nexus 5548up
Vendor
Cisco
Product
Nexus 5596up
Cisco
Nexus 5596up
Vendor
Cisco
Product
Nexus 7000
Cisco
Nexus 7000
Vendor
Cisco
Product
Nexus 7000 10-slot
Cisco
Nexus 7000 10-slot
Vendor
Cisco
Product
Nexus 7000 18-slot
Cisco
Nexus 7000 18-slot
Vendor
Cisco
Product
Nexus 7000 9-slot
Cisco
Nexus 7000 9-slot
Vendor
Cisco
Product
Nx-os
Cisco
Nx-os
Vendor
Cisco
Product
Unified Computing System 6120xp Fabric Interconnect
Cisco
Unified Computing System 6120xp Fabric Interconnect
Vendor
Cisco
Product
Unified Computing System 6140xp Fabric Interconnect
Cisco
Unified Computing System 6140xp Fabric Interconnect
Vendor
Cisco
Product
Unified Computing System 6248up Fabric Interconnect
Cisco
Unified Computing System 6248up Fabric Interconnect
Vendor
Cisco
Product
Unified Computing System 6296up Fabric Interconnect
Cisco
Unified Computing System 6296up Fabric Interconnect
Vendor
Cisco
Product
Unified Computing System Infrastructure And Unified Computing System Software
Cisco
Unified Computing System Infrastructure And Unified Computing System Software
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
