CVE:CVE-2013-1178
CNNVD:CNNVD-201304-529
Cisco NX-OS是美国思科（Cisco）公司的一套面向数据中心的操作系统。
Cisco NX-OS中的Cisco Discovery Protocol (CDP)实现中存在多个缓冲区溢出漏洞。远程攻击者可通过畸形的CDP数据包利用这些漏洞执行任意代码。以下产品设备中存在该漏洞：Nexus 7000设备4.x版本和5.2(4)之前的5.x版本，6.1(1)之前的6.x版本；Nexus 5000和5500设备4.x和5.1(3)N1(1)之前的5.x版本；Nexus 4000设备4.1(2)E1(1h)之前的版本；Nexus 3000设备5.0(3)U3(1)之前的5.x版本；Nexus 1000V设备4.2(1)SV1(5.1)之前的4.x版本；MDS 9000设备4.x和5.2(4)之前的5.x版本；Unified Computing System (UCS) 6100和6200设备2.0(2m)之前的版本；Connected Grid Router (CGR) 1000设备CG4(1)之前的版本。
solution:Upgrade cisco nx-os to a higher version than 4.0,4.0(0n1(1a,4.0(0n1(2,4.0(0n1(2a,4.0(1an1(1,4.0(1an1(1a,4.0(1an2(1,4.0(1an2(1a,4.0(4sv1(1,4.0(4sv1(2,4.0(4sv1(3,4.0(4sv1(3a,4.0(4sv1(3b,4.0(4sv1(3c,4.0(4sv1(3d,4.1(3n1(1,4.1(3n1(1a,4.1(3n2(1,4.1(3n2(1a,4.1.(2,4.1.(3,4.1.(4,4.1.(5,4.2,4.2(1,4.2(1n1(1,4.2(1n2(1,4.2(1n2(1a,4.2(1sv1(4,4.2(1sv1(4a,4.2(1sv1(5.1,4.2(2,4.2(3,4.2(4,4.2(6,4.2(8,4.2.(2a,5.0,5.0(2,5.0(2n1(1,5.0(2n2(1,5.0(2n2(1a,5.0(2a,5.0(3,5.0(3n1(1,5.0(3n1(1a,5.0(3n1(1b,5.0(3n1(1c,5.0(3n2(1,5.0(3n2(2,5.0(3n2(2a,5.0(3n2(2b,5.0(5,5.1,5.1(1,5.1(1a,5.1(2,5.1(3,5.1(3n1(1,5.1(3n1(1a,5.1(4,5.1(5,5.1(6,5.2,5.2(1,5.2(3,5.2(3a,6.0(1,6.0(2,6.1,4.1.\(2\,and avoid the version 4.0,4.0(0)n1(1a),4.0(0)n1(2),4.0(0)n1(2a),4.0(1a)n1(1),4.0(1a)n1(1a),4.0(1a)n2(1),4.0(1a)n2(1a),4.0(4)sv1(1),4.0(4)sv1(2),4.0(4)sv1(3),4.0(4)sv1(3a),4.0(4)sv1(3b),4.0(4)sv1(3c),4.0(4)sv1(3d),4.1(3)n1(1),4.1(3)n1(1a),4.1(3)n2(1),4.1(3)n2(1a),4.1.(2),4.1.(3),4.1.(4),4.1.(5),4.2,4.2(1),4.2(1)n1(1),4.2(1)n2(1),4.2(1)n2(1a),4.2(1)sv1(4),4.2(1)sv1(4a),4.2(1)sv1(5.1),4.2(2),4.2(3),4.2(4),4.2(6),4.2(8),4.2.(2a),5.0,5.0(2),5.0(2)n1(1),5.0(2)n2(1),5.0(2)n2(1a),5.0(2a),5.0(3),5.0(3)n1(1),5.0(3)n1(1a),5.0(3)n1(1b),5.0(3)n1(1c),5.0(3)n2(1),5.0(3)n2(2),5.0(3)n2(2a),5.0(3)n2(2b),5.0(5),5.1,5.1(1),5.1(1a),5.1(2),5.1(3),5.1(3)n1(1),5.1(3)n1(1a),5.1(4),5.1(5),5.1(6),5.2,5.2(1),5.2(3),5.2(3a),6.0(1),6.0(2),6.1,(,4.1.\(2\)]; Upgrade cisco nexus_7000 to a higher version than -; Upgrade cisco nexus_7000_10-slot to a higher version than -; Upgrade cisco nexus_7000_18-slot to a higher version than -; Upgrade cisco nexus_7000_9-slot to a higher version than -; Upgrade cisco mds_9000 to a higher version than *; Upgrade cisco nexus_5000 to a higher version than -; Upgrade cisco nexus_5010 to a higher version than -; Upgrade cisco nexus_5020 to a higher version than -; Upgrade cisco nexus_5548p to a higher version than -; Upgrade cisco nexus_5548up to a higher version than -; Upgrade cisco nexus_5596up to a higher version than -; Upgrade cisco nexus_4001i to a higher version than -; Upgrade cisco nexus_3000 to a higher version than *; Upgrade cisco nexus_3016q to a higher version than -; Upgrade cisco nexus_3048 to a higher version than -; Upgrade cisco nexus_3064t to a higher version than -; Upgrade cisco nexus_3064x to a higher version than -; Upgrade cisco nexus_3548 to a higher version than -; Upgrade cisco nexus_1000v to a higher version than -; Upgrade cisco unified_computing_system_infrastructure_and_unified_computing_system_software to a higher version than 2.0\(1x\,1.0,1.0(2k,1.1,1.1(1m,1.2,1.2(1,1.2(1a,1.2(1d,1.3(1c,1.3(1m,1.3(1n,1.3(1o,1.3(1p,1.3(1q,1.3(1t,1.3(1w,1.3(1y,1.4(1j,1.4(1m,1.4(3i,1.4(3l,1.4(3m,1.4(3q,1.4(3s,1.4(3u,1.4(3y,1.4(4f,1.4(4g,1.4(4i,1.4(4j,1.4(4k,2.0(1q,2.0(1s,2.0(1t,2.0(1w,and avoid the version (,2.0\(1x\)],1.0,1.0(2k),1.1,1.1(1m),1.2,1.2(1),1.2(1a),1.2(1d),1.3(1c),1.3(1m),1.3(1n),1.3(1o),1.3(1p),1.3(1q),1.3(1t),1.3(1w),1.3(1y),1.4(1j),1.4(1m),1.4(3i),1.4(3l),1.4(3m),1.4(3q),1.4(3s),1.4(3u),1.4(3y),1.4(4f),1.4(4g),1.4(4i),1.4(4j),1.4(4k),2.0(1q),2.0(1s),2.0(1t),2.0(1w); Upgrade cisco unified_computing_system_6120xp_fabric_interconnect to a higher version than -; Upgrade cisco unified_computing_system_6140xp_fabric_interconnect to a higher version than -; Upgrade cisco unified_computing_system_6248up_fabric_interconnect to a higher version than -; Upgrade cisco unified_computing_system_6296up_fabric_interconnect to a higher version than -; Upgrade cisco cg-os to a higher version than cg4,cg1,cg2,cg3,and avoid the version (,cg4],cg1,cg2,cg3; Upgrade cisco connected_grid_router_1000 to a higher version than -