Cisco Nexus 3000 vulnerabilities

2 CVEs affecting Cisco Nexus 3000, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-1178, published 2013-04-25.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2011-2581, published 2011-09-14. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle…
• CVE-2013-1178, published 2013-04-25. High severity, CVSS 8.3. EPSS: 1.4% chance of exploitation in the next 30 days. Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and 5500 devices 4.x…