Details of VAR-201304-0174

ID

VAR-201304-0174

CVE

CVE-2013-1226

TITLE

Cisco Nexus 7000 Runs on the device Cisco NX-OS Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-002505

DESCRIPTION

The Ethernet frame-forwarding implementation in Cisco NX-OS on Nexus 7000 devices allows remote attackers to cause a denial of service (forwarding loop and service outage) via a crafted frame, aka Bug ID CSCug47098. The Cisco Nexus 7000 Series is a modular family of data center-class switches designed for highly scalable end-to-end 10 Gigabit Ethernet. Switches with M1 series linear cards are affected by this vulnerability. Cisco Nexus 7000 Series switches running on NX-OS are prone to a remote denial-of-service vulnerability. Successfully exploiting this issue allows remote attackers to cause denial-of-service conditions. This issue is being tracked by Cisco Bug ID CSCug47098. Cisco NX-OS is a data center-oriented operating system developed by Cisco

Trust: 2.52

sources: NVD: CVE-2013-1226 // JVNDB: JVNDB-2013-002505 // CNVD: CNVD-2013-04605 // BID: 59543 // VULHUB: VHN-61228

IOT TAXONOMY

category:

['Network device']

sub_category:

Trust: 0.6

sources: CNVD: CNVD-2013-04605

AFFECTED PRODUCTS

vendor:	cisco	model:	nx-os	scope:	eq	version:	-	Trust: 1.6
vendor:	cisco	model:	nexus 7000	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 18-slot	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 10-slot	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 9-slot	scope:	eq	version:	-	Trust: 1.0
vendor:	cisco	model:	nexus 7000 10 slot switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus 7000 18 slot switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus 7000 9 slot switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus 7000 series switch	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nx-os	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	nexus series switches	scope:	eq	version:	7000	Trust: 0.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	0	Trust: 0.3
vendor:	cisco	model:	nexus	scope:	eq	version:	70000	Trust: 0.3

sources: CNVD: CNVD-2013-04605 // BID: 59543 // JVNDB: JVNDB-2013-002505 // CNNVD: CNNVD-201304-607 // NVD: CVE-2013-1226

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-1226
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2013-1226
value:	MEDIUM
Trust: 0.8
CNVD:	CNVD-2013-04605
value:	MEDIUM
Trust: 0.6
CNNVD:	CNNVD-201304-607
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-61228
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2013-1226
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
CNVD:	CNVD-2013-04605
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.6
VULHUB:	VHN-61228
severity:	MEDIUM
baseScore:	6.1
vectorString:	AV:A/AC:L/AU:N/C:N/I:N/A:C
accessVector:	ADJACENT_NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	COMPLETE
exploitabilityScore:	6.5
impactScore:	6.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: CNVD: CNVD-2013-04605 // VULHUB: VHN-61228 // JVNDB: JVNDB-2013-002505 // CNNVD: CNNVD-201304-607 // NVD: CVE-2013-1226

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-61228 // JVNDB: JVNDB-2013-002505 // NVD: CVE-2013-1226

THREAT TYPE

specific network environment

Trust: 0.6

sources: CNNVD: CNNVD-201304-607

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201304-607

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-002505

PATCH

title:	Cisco Nexus 7000 Frame Forwarding Loop Denial of Service Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1226	Trust: 0.8
title:	29104	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=29104	Trust: 0.8
title:	Cisco Nexus 7000 Series Switch Denial of Service Vulnerability Patch	url:	https://www.cnvd.org.cn/patchInfo/show/33749	Trust: 0.6

sources: CNVD: CNVD-2013-04605 // JVNDB: JVNDB-2013-002505

EXTERNAL IDS

db:	NVD	id:	CVE-2013-1226	Trust: 3.4
db:	BID	id:	59543	Trust: 1.0
db:	JVNDB	id:	JVNDB-2013-002505	Trust: 0.8
db:	CNNVD	id:	CNNVD-201304-607	Trust: 0.7
db:	CNVD	id:	CNVD-2013-04605	Trust: 0.6
db:	CISCO	id:	20130425 CISCO NEXUS 7000 FRAME FORWARDING LOOP DENIAL OF SERVICE VULNERABILITY	Trust: 0.6
db:	SECUNIA	id:	53275	Trust: 0.6
db:	VULHUB	id:	VHN-61228	Trust: 0.1

sources: CNVD: CNVD-2013-04605 // VULHUB: VHN-61228 // BID: 59543 // JVNDB: JVNDB-2013-002505 // CNNVD: CNNVD-201304-607 // NVD: CVE-2013-1226

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-1226	Trust: 2.6
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-1226	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-1226	Trust: 0.8
url:	http://secunia.com/advisories/53275	Trust: 0.6
url:	http://www.cisco.com/	Trust: 0.3

sources: CNVD: CNVD-2013-04605 // VULHUB: VHN-61228 // BID: 59543 // JVNDB: JVNDB-2013-002505 // CNNVD: CNNVD-201304-607 // NVD: CVE-2013-1226

CREDITS

Reported by the vendor.

Trust: 0.3

sources: BID: 59543

SOURCES

db:	CNVD	id:	CNVD-2013-04605
db:	VULHUB	id:	VHN-61228
db:	BID	id:	59543
db:	JVNDB	id:	JVNDB-2013-002505
db:	CNNVD	id:	CNNVD-201304-607
db:	NVD	id:	CVE-2013-1226

LAST UPDATE DATE

2024-11-23T21:55:36.417000+00:00

SOURCES UPDATE DATE

db:	CNVD	id:	CNVD-2013-04605	date:	2013-05-03T00:00:00
db:	VULHUB	id:	VHN-61228	date:	2013-04-29T00:00:00
db:	BID	id:	59543	date:	2013-04-25T00:00:00
db:	JVNDB	id:	JVNDB-2013-002505	date:	2013-04-30T00:00:00
db:	CNNVD	id:	CNNVD-201304-607	date:	2013-05-02T00:00:00
db:	NVD	id:	CVE-2013-1226	date:	2024-11-21T01:49:09.120

SOURCES RELEASE DATE

db:	CNVD	id:	CNVD-2013-04605	date:	2013-05-03T00:00:00
db:	VULHUB	id:	VHN-61228	date:	2013-04-29T00:00:00
db:	BID	id:	59543	date:	2013-04-25T00:00:00
db:	JVNDB	id:	JVNDB-2013-002505	date:	2013-04-30T00:00:00
db:	CNNVD	id:	CNNVD-201304-607	date:	2013-04-29T00:00:00
db:	NVD	id:	CVE-2013-1226	date:	2013-04-29T12:20:36.267