CVE-2013-1122: Input Validation

Published Feb 13, 2013

Updated

Cisco NX-OS on the Nexus 7000, when a certain Overlay Transport Virtualization (OTV) configuration is used, allows remote attackers to cause a denial of service (M1-Series module reload) via crafted packets, aka Bug ID CSCud15673.

Affected Software

72 affected components

Cisco NX-OS

Cisco NX-OS=4.0

Cisco NX-OS=4.0\(0\)n1\(1a\)

Cisco NX-OS=4.0\(0\)n1\(2\)

Cisco NX-OS=4.0\(0\)n1\(2a\)

Cisco NX-OS=4.0\(1a\)n1\(1\)

Cisco NX-OS=4.0\(1a\)n1\(1a\)

Cisco NX-OS=4.0\(1a\)n2\(1\)

Cisco NX-OS=4.0\(1a\)n2\(1a\)

Cisco NX-OS=4.0\(4\)sv1\(1\)

Cisco NX-OS=4.0\(4\)sv1\(2\)

Cisco NX-OS=4.0\(4\)sv1\(3\)

Cisco NX-OS=4.0\(4\)sv1\(3a\)

Cisco NX-OS=4.0\(4\)sv1\(3b\)

Cisco NX-OS=4.0\(4\)sv1\(3c\)

Cisco NX-OS=4.0\(4\)sv1\(3d\)

Cisco NX-OS=4.1\(3\)n1\(1\)

Cisco NX-OS=4.1\(3\)n1\(1a\)

Cisco NX-OS=4.1\(3\)n2\(1\)

Cisco NX-OS=4.1\(3\)n2\(1a\)

Cisco NX-OS=4.1.\(2\)

Cisco NX-OS=4.1.\(3\)

Cisco NX-OS=4.1.\(4\)

Cisco NX-OS=4.1.\(5\)

Cisco NX-OS=4.2

Cisco NX-OS=4.2\(1\)

Cisco NX-OS=4.2\(1\)n1\(1\)

Cisco NX-OS=4.2\(1\)n2\(1\)

Cisco NX-OS=4.2\(1\)n2\(1a\)

Cisco NX-OS=4.2\(1\)sv1\(4\)

Cisco NX-OS=4.2\(1\)sv1\(4a\)

Cisco NX-OS=4.2\(1\)sv1\(5.1\)

Cisco NX-OS=4.2\(2\)

Cisco NX-OS=4.2\(3\)

Cisco NX-OS=4.2\(4\)

Cisco NX-OS=4.2\(6\)

Cisco NX-OS=4.2\(8\)

Cisco NX-OS=4.2.\(2a\)

Cisco NX-OS=5.0

Cisco NX-OS=5.0\(2\)

Cisco NX-OS=5.0\(2\)n1\(1\)

Cisco NX-OS=5.0\(2\)n2\(1\)

Cisco NX-OS=5.0\(2\)n2\(1a\)

Cisco NX-OS=5.0\(2a\)

Cisco NX-OS=5.0\(3\)

Cisco NX-OS=5.0\(3\)n1\(1\)

Cisco NX-OS=5.0\(3\)n1\(1a\)

Cisco NX-OS=5.0\(3\)n1\(1b\)

Cisco NX-OS=5.0\(3\)n1\(1c\)

Cisco NX-OS=5.0\(3\)n2\(1\)

Cisco NX-OS=5.0\(3\)n2\(2\)

Cisco NX-OS=5.0\(3\)n2\(2a\)

Cisco NX-OS=5.0\(3\)n2\(2b\)

Cisco NX-OS=5.0\(5\)

Cisco NX-OS=5.1

Cisco NX-OS=5.1\(1\)

Cisco NX-OS=5.1\(1a\)

Cisco NX-OS=5.1\(2\)

Cisco NX-OS=5.1\(3\)

Cisco NX-OS=5.1\(3\)n1\(1\)

Cisco NX-OS=5.1\(3\)n1\(1a\)

Cisco NX-OS=5.1\(4\)

Cisco NX-OS=5.1\(5\)

Cisco NX-OS=5.1\(6\)

Cisco NX-OS=5.2

Cisco NX-OS=5.2\(1\)

Cisco NX-OS=5.2\(3\)

Cisco NX-OS=5.2\(3a\)

Cisco NX-OS=6.0\(1\)

Cisco NX-OS=6.0\(2\)

Cisco NX-OS=6.1

Cisco Nexus 7000

Event History

Feb 13, 2013

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2013-1122?

CVE-2013-1122 is classified as a high severity vulnerability due to its potential to cause a denial of service.

How do I fix CVE-2013-1122?

To remediate CVE-2013-1122, upgrade your Cisco NX-OS to a fixed version available from Cisco's official resources.

What systems are affected by CVE-2013-1122?

CVE-2013-1122 affects Cisco NX-OS deployments on the Nexus 7000 series, specifically under certain Overlay Transport Virtualization configurations.

What is the exploit mechanism for CVE-2013-1122?

CVE-2013-1122 can be exploited by sending crafted packets that trigger a M1-Series module reload, causing a denial of service.

Is there a known workaround for CVE-2013-1122?

Currently, no specific workarounds are recommended for CVE-2013-1122; the best action is to upgrade to the patched versions.