What’s Vulnerable › Vulnerabilities

CVE-2011-4023

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2012-05-03 · updated 2026-06-16
• Weakness: CWE-399

Description

Memory leak in libcmd in Cisco NX-OS 5.0 on Nexus switches allows remote authenticated users to cause a denial of service (memory consumption) via SNMP requests, aka Bug ID CSCtr65682.

Affected products

• Cisco Nexus 2148T Fex Switch: all versions
• Cisco Nexus 2224Tp Fex Switch: all versions
• Cisco Nexus 2232Pp Fex Switch: all versions
• Cisco Nexus 2232Tm Fex Switch: all versions
• Cisco Nexus 2248Tp E Fex Switch: all versions
• Cisco Nexus 2248Tp Fex Switch: all versions
• Cisco Nexus 5010P Switch: all versions
• Cisco Nexus 5020P Switch: all versions
• Cisco Nexus 5548P: all versions
• Cisco Nexus 5548Up: all versions
• Cisco Nexus 5596Up: all versions
• Cisco NX-OS: 5.0, 5.0(2), 5.0(2)n1(1), 5.0(2)n2(1), 5.0(2)n2(1a), 5.0(2a) (+10)

References

• http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_0_3_N2_1/Nexus5000_Release_Notes_5_0_3_N2.html
• http://www.cisco.com/en/US/docs/switches/datacenter/nexus5000/sw/release/notes/Rel_5_0_3_N2_1/Nexus5000_Release_Notes_5_0_3_N2.html

Get alerted when CVE-2011-4023 or the next vulnerability affects your stack