CVE-2011-2581

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-09-14 · updated 2026-06-16
Weakness: CWE-264

Description

The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490.

Affected products

Cisco Nexus 3000: all versions
Cisco Nexus 5000: all versions
Cisco NX-OS: through 5.0\(3\)u1\(2\); 5.0(2), 5.0(3)n1(1), 5.0(3)n1(1a), 5.0(3)n1(1b), 5.0(3), 5.0(3)n1(1c) (+3)

References

http://secunia.com/advisories/45883
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml
http://www.securitytracker.com/id?1026019
http://secunia.com/advisories/45883
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml
http://www.securitytracker.com/id?1026019

Get alerted when CVE-2011-2581 or the next vulnerability affects your stack