Lucene search
K

Cisco NX-OS Resource Management Errors (CVE-2013-1121)

🗓️ 04 Dec 2024 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 12 Views

Remote attackers can trigger denial of service in Cisco NX-OS via crafted regular expressions.

Related
Refs
Code
ReporterTitlePublishedViews
Family
Cisco
Cisco NX-OS Software BGP Regex Vulnerability
17 Sep 201318:41
cisco
Tenable Nessus
Cisco Open Network Environment Platform Unvalidated Pointer (CSCui51551)
11 Oct 201300:00
nessus
CVE
CVE-2013-1121
19 Sep 201318:00
cve
Cvelist
CVE-2013-1121
19 Sep 201318:00
cvelist
EUVD
EUVD-2013-1161
7 Oct 202500:30
euvd
NVD
CVE-2013-1121
19 Sep 201318:55
nvd
OpenVAS
Cisco NX-OS Software BGP Regex Vulnerability (Cisco-SA-20130917-CVE-2013-1121)
22 Oct 201300:00
openvas
Prion
Code injection
19 Sep 201318:55
prion
RedhatCVE
CVE-2013-1121
22 May 202503:56
redhatcve
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(502788);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/03/23");

  script_cve_id("CVE-2013-1121");

  script_name(english:"Cisco NX-OS Resource Management Errors (CVE-2013-1121)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The regex engine in the BGP implementation in Cisco NX-OS, when a
complex regular expression is configured for inbound routes, allows
remote attackers to cause a denial of service (device reload) via a
crafted AS path set, aka Bug ID CSCuf49554.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  # http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1121
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?66936fcb");
  # http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-1121
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?66936fcb");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:H/Au:N/C:N/I:N/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2013-1121");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(399);

  script_set_attribute(attribute:"vuln_publication_date", value:"2013/09/19");
  script_set_attribute(attribute:"patch_publication_date", value:"2013/09/19");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/12/04");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nx-os:-");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2024-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Cisco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Cisco');

var asset = tenable_ot::assets::get(vendor:'Cisco');

var vuln_cpes = {
    "cpe:/o:cisco:nx-os:" :
        {"family" : "NXOS", "versionEndIncluding" : "6.1(3)"},
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 Mar 2026 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25.4
EPSS0.0106
12