Unscored severity · published Sep 14, 2011
CVE-2011-2581
The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not…
–
CVSS
2%
EPSS
No
On KEV
Description
The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
N3
Nexus 3000 · Cisco
All versions, or not specified · source: NVD
N5
Nexus 5000 · Cisco
All versions, or not specified · source: NVD
NX
Nx-os · Cisco
5.0(2); 5.0(3)n1(1); 5.0(3)n1(1a); 5.0(3)n1(1b) · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-2581
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-2581
secunia.com
http://secunia.com/advisories/45883
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml
www.securitytracker.com
http://www.securitytracker.com/id?1026019
More from Nexus 3000
–
CVE-2013-1178
Multiple buffer overflows in the Cisco Discovery Protocol (CDP) implementation in Cisco NX-OS on Nexus 7000 devices 4.x and 5.x before 5.2(4) and 6.x before 6.1(1), Nexus 5000 and…