CVE-2011-2581

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches

Description The issue arises from the ACL implementation not properly handling comments in conjunction with deny statements. This allows remote attackers to bypass intended access restrictions by sending packets in certain circumstances.

Recommendations For Cisco NX-OS versions 5.0(2) through 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, update to version 5.0(3)N2(1) or later. For Cisco NX-OS versions prior to 5.0(3)U1(2a) on Nexus 3000 series switches, update to version 5.0(3)U1(2a) or later.