CVE-2013-1178

Published: Apr 25, 2013Modified: Apr 29, 2026

8.3

Vector

AV:A/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 6.5 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.

Affected (135)

Products: Cisco: Nx Os, Nexus 7000, Nexus 7000 10 Slot, Nexus 7000 18 Slot, Nexus 7000 9 Slot, Mds 9000, Nexus 5000, Nexus 5010, Nexus 5020, Nexus 5548p, Nexus 5548up, Nexus 5596up, Nexus 4001i, Nexus 3000, Nexus 3016q, Nexus 3048, Nexus 3064t, Nexus 3064x, Nexus 3548, Nexus 1000v, Unified Computing System Infrastructure And Unified Computing System Software, Unified Computing System 6120xp Fabric Interconnect, Unified Computing System 6140xp Fabric Interconnect, Unified Computing System 6248up Fabric Interconnect, Unified Computing System 6296up Fabric Interconnect, Cg Os, Connected Grid Router 1000

27 products

Unified Computing System Infrastructure And Unified Computing System Software

Unified Computing System 6120xp Fabric Interconnect

Unified Computing System 6140xp Fabric Interconnect

Unified Computing System 6248up Fabric Interconnect

Unified Computing System 6296up Fabric Interconnect

Cg Os

Connected Grid Router 1000

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 6.0(1)
Cisco Nx Os	Version 6.0(2)
Cisco Nx Os	Version 6.1
Cisco Nexus 7000	All versions
Cisco Nexus 7000 10 Slot	All versions
Cisco Nexus 7000 18 Slot	All versions
Cisco Nexus 7000 9 Slot	All versions

Configuration B

11 vulnerable

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 5.1(3)
Cisco Nx Os	Version 5.1(3)n1(1)
Cisco Nx Os	Version 5.1(3)n1(1a)
Cisco Nx Os	Version 5.1(4)
Cisco Nx Os	Version 5.1(5)
Cisco Nx Os	Version 5.1(6)
Cisco Nx Os	Version 5.2
Cisco Nx Os	Version 5.2(1)
Cisco Nx Os	Version 5.2(3)
Cisco Nx Os	Version 5.2(3a)
Cisco Mds 9000	All versions

Configuration C

18 vulnerable

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 4.2.(2a)
Cisco Nx Os	Version 4.2(1)sv1(5.1)
Cisco Nx Os	Version 4.2(2)
Cisco Nx Os	Version 4.2(3)
Cisco Nx Os	Version 4.2(4)
Cisco Nx Os	Version 4.2(6)
Cisco Nx Os	Version 4.2(8)
Cisco Nx Os	Version 5.0(5)
Cisco Nx Os	Version 5.1
Cisco Nx Os	Version 5.1(1)
Cisco Nx Os	Version 5.1(1a)
Cisco Nx Os	Version 5.1(2)
Cisco Nexus 5000	All versions
Cisco Nexus 5010	All versions
Cisco Nexus 5020	All versions
Cisco Nexus 5548p	All versions
Cisco Nexus 5548up	All versions
Cisco Nexus 5596up	All versions

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Cisco Nx Os	Up to 4.1.\(2\)
Cisco Nexus 4001i	All versions

Configuration E

21 vulnerable

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 5.0
Cisco Nx Os	Version 5.0(2)
Cisco Nx Os	Version 5.0(2)n1(1)
Cisco Nx Os	Version 5.0(2)n2(1)
Cisco Nx Os	Version 5.0(2)n2(1a)
Cisco Nx Os	Version 5.0(2a)
Cisco Nx Os	Version 5.0(3)
Cisco Nx Os	Version 5.0(3)n1(1)
Cisco Nx Os	Version 5.0(3)n1(1a)
Cisco Nx Os	Version 5.0(3)n1(1b)
Cisco Nx Os	Version 5.0(3)n1(1c)
Cisco Nx Os	Version 5.0(3)n2(1)
Cisco Nx Os	Version 5.0(3)n2(2)
Cisco Nx Os	Version 5.0(3)n2(2a)
Cisco Nx Os	Version 5.0(3)n2(2b)
Cisco Nexus 3000	All versions
Cisco Nexus 3016q	All versions
Cisco Nexus 3048	All versions
Cisco Nexus 3064t	All versions
Cisco Nexus 3064x	All versions
Cisco Nexus 3548	All versions

Configuration F

31 vulnerable

Vulnerable Software	Affected Versions
Cisco Nx Os	Version 4.0
Cisco Nx Os	Version 4.0(0)n1(1a)
Cisco Nx Os	Version 4.0(0)n1(2)
Cisco Nx Os	Version 4.0(0)n1(2a)
Cisco Nx Os	Version 4.0(1a)n1(1)
Cisco Nx Os	Version 4.0(1a)n1(1a)
Cisco Nx Os	Version 4.0(1a)n2(1)
Cisco Nx Os	Version 4.0(1a)n2(1a)
Cisco Nx Os	Version 4.0(4)sv1(1)
Cisco Nx Os	Version 4.0(4)sv1(2)
Cisco Nx Os	Version 4.0(4)sv1(3)
Cisco Nx Os	Version 4.0(4)sv1(3a)
Cisco Nx Os	Version 4.0(4)sv1(3b)
Cisco Nx Os	Version 4.0(4)sv1(3c)
Cisco Nx Os	Version 4.0(4)sv1(3d)
Cisco Nx Os	Version 4.1.(2)
Cisco Nx Os	Version 4.1.(3)
Cisco Nx Os	Version 4.1.(4)
Cisco Nx Os	Version 4.1.(5)
Cisco Nx Os	Version 4.1(3)n1(1)
Cisco Nx Os	Version 4.1(3)n1(1a)
Cisco Nx Os	Version 4.1(3)n2(1)
Cisco Nx Os	Version 4.1(3)n2(1a)
Cisco Nx Os	Version 4.2
Cisco Nx Os	Version 4.2(1)
Cisco Nx Os	Version 4.2(1)n1(1)
Cisco Nx Os	Version 4.2(1)n2(1)
Cisco Nx Os	Version 4.2(1)n2(1a)
Cisco Nx Os	Version 4.2(1)sv1(4)
Cisco Nx Os	Version 4.2(1)sv1(4a)
Cisco Nexus 1000v	All versions

Configuration G

40 vulnerable

Vulnerable Software	Affected Versions
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Up to 2.0\(1x\)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.0
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.0(2k)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.1
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.1(1m)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.2
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.2(1)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.2(1a)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.2(1d)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1c)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1m)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1n)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1o)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1p)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1q)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1t)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1w)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.3(1y)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(1j)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(1m)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(3i)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(3l)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(3m)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(3q)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(3s)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(3u)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(3y)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(4f)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(4g)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(4i)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(4j)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 1.4(4k)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 2.0(1q)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 2.0(1s)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 2.0(1t)
Cisco Unified Computing System Infrastructure And Unified Computing System Software	Version 2.0(1w)
Cisco Unified Computing System 6120xp Fabric Interconnect	All versions
Cisco Unified Computing System 6140xp Fabric Interconnect	All versions
Cisco Unified Computing System 6248up Fabric Interconnect	All versions
Cisco Unified Computing System 6296up Fabric Interconnect	All versions

Configuration H

5 vulnerable

Vulnerable Software	Affected Versions
Cisco Cg Os	Up to cg4
Cisco Cg Os	Version cg1
Cisco Cg Os	Version cg2
Cisco Cg Os	Version cg3
Cisco Connected Grid Router 1000	All versions

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (2)

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti

Source: psirt@cisco.com

Vendor Advisory

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.