Details of VAR-201311-0306

ID

VAR-201311-0306

CVE

CVE-2013-5566

TITLE

Cisco MDS 9000 Runs on the device Cisco NX-OS Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2013-005054

DESCRIPTION

Cisco NX-OS 5.0 and earlier on MDS 9000 devices allows remote attackers to cause a denial of service (supervisor CPU consumption) via Authentication Header (AH) authentication in a Virtual Router Redundancy Protocol (VRRP) frame, aka Bug ID CSCte27874. Cisco MDS 9000 Runs on the device Cisco NX-OS There is a service disruption ( Supervisor CPU Resource consumption ) There are vulnerabilities that are put into a state. Cisco MDS 9000 NX-OS Software is prone to a remote denial-of-service vulnerability. Attackers can exploit this issue to cause the device to consume excessive CPU resources, resulting in denial-of-service conditions. This issue is being tracked by Cisco bug ID CSCte27874. Cisco NX-OS is a data center-oriented operating system developed by Cisco. The vulnerability is caused by the program not correctly handling Virtual Router Redundancy Protocol (VRRP) packets

Trust: 1.98

sources: NVD: CVE-2013-5566 // JVNDB: JVNDB-2013-005054 // BID: 63564 // VULHUB: VHN-65568

AFFECTED PRODUCTS

vendor:	cisco	model:	nx-os	scope:	lte	version:	5.0	Trust: 1.8
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(8\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(2\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(1\)sv1\(5.1\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(3\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(4\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(1\)n2\(1a\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(1\)sv1\(4a\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(1\)sv1\(4\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2.\(2a\)	Trust: 1.6
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(6\)	Trust: 1.6
vendor:	cisco	model:	mds nx-os software	scope:	eq	version:	90004.1	Trust: 1.2
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(0\)n1\(1a\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1.\(2\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1\(3\)n1\(1a\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1.\(3\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1.\(4\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(1\)n2\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(1a\)n2\(1a\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(1a\)n2\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1\(3\)n2\(1a\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(4\)sv1\(3b\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(0\)n1\(2a\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(4\)sv1\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(1a\)n1\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1.\(5\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(4\)sv1\(3a\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(0\)n1\(2\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1\(3\)n1\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(4\)sv1\(3\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(4\)sv1\(2\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.2\(1\)n1\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(4\)sv1\(3c\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.1\(3\)n2\(1\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(1a\)n1\(1a\)	Trust: 1.0
vendor:	cisco	model:	nx-os	scope:	eq	version:	4.0\(4\)sv1\(3d\)	Trust: 1.0
vendor:	cisco	model:	mds nx-os software	scope:	eq	version:	90004.2	Trust: 0.9
vendor:	cisco	model:	mds 9000 series	scope:	-	version:	-	Trust: 0.8
vendor:	cisco	model:	mds nx-os software	scope:	eq	version:	90005.0	Trust: 0.3
vendor:	cisco	model:	mds nx-os software	scope:	eq	version:	90004.2(3)	Trust: 0.3
vendor:	cisco	model:	mds nx-os software	scope:	eq	version:	90003.2	Trust: 0.3
vendor:	cisco	model:	mds nx-os software	scope:	eq	version:	90003.0	Trust: 0.3
vendor:	cisco	model:	mds nx-os software	scope:	eq	version:	90002.1	Trust: 0.3

sources: BID: 63564 // JVNDB: JVNDB-2013-005054 // CNNVD: CNNVD-201311-106 // NVD: CVE-2013-5566

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2013-5566
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2013-5566
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-201311-106
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-65568
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2013-5566
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-65568
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:N/I:N/A:P
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	NONE
integrityImpact:	NONE
availabilityImpact:	PARTIAL
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-65568 // JVNDB: JVNDB-2013-005054 // CNNVD: CNNVD-201311-106 // NVD: CVE-2013-5566

PROBLEMTYPE DATA

problemtype:

CWE-119

Trust: 1.9

sources: VULHUB: VHN-65568 // JVNDB: JVNDB-2013-005054 // NVD: CVE-2013-5566

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201311-106

TYPE

buffer overflow

Trust: 0.6

sources: CNNVD: CNNVD-201311-106

CONFIGURATIONS

sources: JVNDB: JVNDB-2013-005054

PATCH

title:	Cisco MDS Denial of Service Vulnerability	url:	http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-5566	Trust: 0.8
title:	31663	url:	http://tools.cisco.com/security/center/viewAlert.x?alertId=31663	Trust: 0.8

sources: JVNDB: JVNDB-2013-005054

EXTERNAL IDS

db:	NVD	id:	CVE-2013-5566	Trust: 2.8
db:	BID	id:	63564	Trust: 1.0
db:	JVNDB	id:	JVNDB-2013-005054	Trust: 0.8
db:	CNNVD	id:	CNNVD-201311-106	Trust: 0.7
db:	CISCO	id:	20131106 CISCO MDS DENIAL OF SERVICE VULNERABILITY	Trust: 0.6
db:	NSFOCUS	id:	25231	Trust: 0.6
db:	VULHUB	id:	VHN-65568	Trust: 0.1

sources: VULHUB: VHN-65568 // BID: 63564 // JVNDB: JVNDB-2013-005054 // CNNVD: CNNVD-201311-106 // NVD: CVE-2013-5566

REFERENCES

url:	http://tools.cisco.com/security/center/content/ciscosecuritynotice/cve-2013-5566	Trust: 2.0
url:	http://tools.cisco.com/security/center/viewalert.x?alertid=31663	Trust: 2.0
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2013-5566	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2013-5566	Trust: 0.8
url:	http://www.securityfocus.com/bid/63564	Trust: 0.6
url:	http://www.nsfocus.net/vulndb/25231	Trust: 0.6
url:	http://www.cisco.com	Trust: 0.3

sources: VULHUB: VHN-65568 // BID: 63564 // JVNDB: JVNDB-2013-005054 // CNNVD: CNNVD-201311-106 // NVD: CVE-2013-5566

CREDITS

Cisco

Trust: 0.9

sources: BID: 63564 // CNNVD: CNNVD-201311-106

SOURCES

db:	VULHUB	id:	VHN-65568
db:	BID	id:	63564
db:	JVNDB	id:	JVNDB-2013-005054
db:	CNNVD	id:	CNNVD-201311-106
db:	NVD	id:	CVE-2013-5566

LAST UPDATE DATE

2024-11-23T22:27:22.652000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-65568	date:	2013-11-14T00:00:00
db:	BID	id:	63564	date:	2013-11-06T00:00:00
db:	JVNDB	id:	JVNDB-2013-005054	date:	2013-11-11T00:00:00
db:	CNNVD	id:	CNNVD-201311-106	date:	2013-11-08T00:00:00
db:	NVD	id:	CVE-2013-5566	date:	2024-11-21T01:57:42.993

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-65568	date:	2013-11-08T00:00:00
db:	BID	id:	63564	date:	2013-11-06T00:00:00
db:	JVNDB	id:	JVNDB-2013-005054	date:	2013-11-11T00:00:00
db:	CNNVD	id:	CNNVD-201311-106	date:	2013-11-08T00:00:00
db:	NVD	id:	CVE-2013-5566	date:	2013-11-08T04:47:23.073