PT-2011-3936
CVE-2011-2581
·
تاريخ النشر
2011-09-14
·
تاريخ التحديث
2022-04-05
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches
Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches
Description
The issue arises from the ACL implementation not properly handling comments in conjunction with deny statements. This allows remote attackers to bypass intended access restrictions by sending packets in certain circumstances.
Recommendations
For Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, update to version 5.0(3)N2(1) or later.
For Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches, update to version 5.0(3)U1(2a) or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾