CVE-2013-6982
UnknownEPSS 2.83%
Last modified
CVE-2013-6982 is a vulnerability of currently unknown severity. The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.. EPSS estimates a 2.83% chance of exploitation in the next 30 days.
Description
The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Nx-Os | <= 6.2\(2a\) |
| Cisco | Nx-Os | All versions |
| Cisco | Nx-Os | 4.0 |
| Cisco | Nx-Os | 4.0\(0\)n1\(1a\) |
| Cisco | Nx-Os | 4.0\(0\)n1\(2\) |
| Cisco | Nx-Os | 4.0\(0\)n1\(2a\) |
| Cisco | Nx-Os | 4.0\(1a\)n1\(1\) |
| Cisco | Nx-Os | 4.0\(1a\)n1\(1a\) |
| Cisco | Nx-Os | 4.0\(1a\)n2\(1\) |
| Cisco | Nx-Os | 4.0\(1a\)n2\(1a\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(1\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(2\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3a\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3b\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3c\) |
| Cisco | Nx-Os | 4.0\(4\)sv1\(3d\) |
| Cisco | Nx-Os | 4.1\(3\)n1\(1\) |
| Cisco | Nx-Os | 4.1\(3\)n1\(1a\) |
| Cisco | Nx-Os | 4.1\(3\)n2\(1\) |
| Cisco | Nx-Os | 4.1\(3\)n2\(1a\) |
| Cisco | Nx-Os | 4.1.\(2\) |
| Cisco | Nx-Os | 4.1.\(3\) |
| Cisco | Nx-Os | 4.1.\(4\) |
| Cisco | Nx-Os | 4.1.\(5\) |
| Cisco | Nx-Os | 4.2 |
| Cisco | Nx-Os | 4.2\(1\) |
| Cisco | Nx-Os | 4.2\(1\)n1\(1\) |
| Cisco | Nx-Os | 4.2\(1\)n2\(1\) |
| Cisco | Nx-Os | 4.2\(1\)n2\(1a\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(4\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(4a\) |
| Cisco | Nx-Os | 4.2\(1\)sv1\(5.1\) |
| Cisco | Nx-Os | 4.2\(2\) |
| Cisco | Nx-Os | 4.2\(3\) |
| Cisco | Nx-Os | 4.2\(4\) |
| Cisco | Nx-Os | 4.2\(6\) |
| Cisco | Nx-Os | 4.2\(8\) |
| Cisco | Nx-Os | 4.2.\(2a\) |
| Cisco | Nx-Os | 5.0 |
| Cisco | Nx-Os | 5.0\(2\) |
| Cisco | Nx-Os | 5.0\(2\)n1\(1\) |
| Cisco | Nx-Os | 5.0\(2\)n2\(1\) |
| Cisco | Nx-Os | 5.0\(2\)n2\(1a\) |
| Cisco | Nx-Os | 5.0\(2a\) |
| Cisco | Nx-Os | 5.0\(3\) |
| Cisco | Nx-Os | 5.0\(3\)n1\(1\) |
| Cisco | Nx-Os | 5.0\(3\)n1\(1a\) |
| Cisco | Nx-Os | 5.0\(3\)n1\(1b\) |
| Cisco | Nx-Os | 5.0\(3\)n1\(1c\) |
Showing 50 of 101 affected configurations. See NVD for the full list.
References
- http://www.securityfocus.com/bid/64670Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029568Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/64670Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1029568Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2013-6982?
The BGP implementation in Cisco NX-OS 6.2(2a) and earlier does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families, which allows remote attackers to cause a denial of service (peer reset) via a crafted message, aka Bug ID CSCuj03174.
How severe is CVE-2013-6982?
Severity scoring for CVE-2013-6982 is pending analysis. The EPSS model estimates a 2.83% probability of exploitation in the next 30 days.
How do I fix CVE-2013-6982?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2013
- CVE-2013-6974Cross-site scripting (XSS) vulnerability in the web interfac…
- CVE-2013-6975Directory traversal vulnerability in the command-line interf…
- CVE-2013-6976Cross-site request forgery (CSRF) vulnerability in goform/Qu…
- CVE-2013-6978The disaster recovery system (DRS) component in Cisco Unifie…
- CVE-2013-6979The VTY authentication implementation in Cisco IOS XE 03.02.…
- CVE-2013-6981Cisco IOS XE 3.7S(.1) and earlier allows remote attackers to…
- CVE-2013-6983SQL injection vulnerability in the web interface in Cisco Un…
- CVE-2013-6985SQL injection vulnerability in m_worklog/log_searchday.jsp i…
- CVE-2013-6986The ZippyYum Subway CA Kiosk app 3.4 for iOS uses cleartext …
- CVE-2013-6987Multiple directory traversal vulnerabilities in the FileBrow…
- CVE-2013-6990FortiGuard FortiAuthenticator before 3.0 allows remote admin…
- CVE-2013-6991Cross-site scripting (XSS) vulnerability in the WP-Cron Dash…
Are you affected by CVE-2013-6982?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST