CVE-2013-1178

Severity: high (CVSS 8.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-25 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x and 5.x before 5.1(3)N1(1), Nexus 4000 devices before 4.1(2)E1(1h), Nexus 3000 devices 5.x before 5.0(3)U3(1), Nexus 1000V devices 4.x before 4.2(1)SV1(5.1), MDS 9000 devices 4.x and 5.x before 5.2(4), Unified Computing System (UCS) 6100 and 6200 devices before 2.0(2m), and Connected Grid Router (CGR) 1000 devices before CG4(1) allow remote attackers to execute arbitrary code via malformed CDP packets, aka Bug IDs CSCtu10630, CSCtu10551, CSCtu10550, CSCtw56581, CSCtu10548, CSCtu10544, and CSCuf61275.

Affected products

Cisco Cg-Os: through cg4; cg1, cg2, cg3
Cisco Connected Grid Router 1000: all versions
Cisco Mds 9000: all versions
Cisco Nexus 1000V: all versions
Cisco Nexus 3000: all versions
Cisco Nexus 3016Q: all versions
Cisco Nexus 3048: all versions
Cisco Nexus 3064T: all versions
Cisco Nexus 3064X: all versions
Cisco Nexus 3548: all versions
Cisco Nexus 4001I: all versions
Cisco Nexus 5000: all versions
Cisco Nexus 5010: all versions
Cisco Nexus 5020: all versions
Cisco Nexus 5548P: all versions
Cisco Nexus 5548Up: all versions
Cisco Nexus 5596Up: all versions
Cisco Nexus 7000: all versions
Cisco Nexus 7000 10-Slot: all versions
Cisco Nexus 7000 18-Slot: all versions
Cisco Nexus 7000 9-Slot: all versions
Cisco NX-OS: through 4.1.\(2\); 4.0, 4.0(0)n1(1a), 4.0(0)n1(2), 4.0(0)n1(2a), 4.0(1a)n1(1), 4.0(1a)n1(1a) (+64)
Cisco Unified Computing System 6120Xp Fabric Interconnect: all versions
Cisco Unified Computing System 6140Xp Fabric Interconnect: all versions
Cisco Unified Computing System 6248Up Fabric Interconnect: all versions
Cisco Unified Computing System 6296Up Fabric Interconnect: all versions
Cisco Unified Computing System Infrastructure And Unified Computing System Software: through 2.0\(1x\); 1.0, 1.0(2k), 1.1, 1.1(1m), 1.2, 1.2(1) (+29)

References

Get alerted when CVE-2013-1178 or the next vulnerability affects your stack