CVE-2013-1180

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-04-25 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the SNMP implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(5) and 6.x before 6.1(1) and MDS 9000 devices 4.x and 5.x before 5.2(5) allows remote authenticated users to execute arbitrary code via a crafted SNMP request, aka Bug ID CSCtx54822.

Affected products

Cisco Mds 9000: all versions
Cisco Nexus 7000: all versions
Cisco Nexus 7000 10-Slot: all versions
Cisco Nexus 7000 18-Slot: all versions
Cisco Nexus 7000 9-Slot: all versions
Cisco NX-OS: 4.0, 4.0(0)n1(1a), 4.0(0)n1(2), 4.0(0)n1(2a), 4.0(1a)n1(1), 4.0(1a)n1(1a) (+65)

References

http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20130424-nxosmulti

Get alerted when CVE-2013-1180 or the next vulnerability affects your stack