SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2013-1181

Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.0(3)N2(2), Nexus 3000 devices 5.x before 5.0(3)U3(2), and Unified Computing System (UCS) 6200 devices before 2.0(1w) allows remote attackers to cause a denial of service (device reload) by sending a…

HIGH 7.8EPSS 1.89%

Does this matter?

High impact if exploited, but EPSS currently rates exploitation as unlikely (1.89%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.

Description

Cisco NX-OS on Nexus 5500 devices 4.x and 5.x before 5.0(3)N2(2), Nexus 3000 devices 5.x before 5.0(3)U3(2), and Unified Computing System (UCS) 6200 devices before 2.0(1w) allows remote attackers to cause a denial of service (device reload) by sending a jumbo packet to the management interface, aka Bug IDs CSCtx17544, CSCts10593, and CSCtx95389.

CVSS 2.0
7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
EPSS
1.89% probability · 78th percentile
CISA KEV
Not listed
Weakness
CWE-20
Affected
cisco/nx-os · cisco/nexus 5548p · cisco/nexus 5548up · cisco/nexus 5596up · cisco/nexus 3016q · cisco/nexus 3048 · cisco/nexus 3064t · cisco/nexus 3064x · cisco/nexus 3548 · cisco/unified computing system infrastructure and unified computing system software · cisco/unified computing system 6248up fabric interconnect · cisco/unified computing system 6296up fabric interconnect
Source
psirt@cisco.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.