CVE Feed

    Dashboard / CVE / CVE-2011-2581

    CVE-2011-2581

    The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before 5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before 5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle comments in conjunction with deny statements, which allows remote attackers to bypass intended access restrictions in opportunistic circumstances by sending packets, aka Bug IDs CSCto09813 and CSCtr61490.

    Published:Sep 14, 2011
    Last Modified:Apr 11, 2025
    EPS:Sep 14, 2011
    EPSS Score:0.00207
    CVSS Score:5

    Affected Products

    Vendor
    Cisco
    Product
    Nexus 3000
    Vendor
    Cisco
    Product
    Nexus 5000
    Vendor
    Cisco
    Product
    Nx-os

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2025-20241 (CVSS 7.4) — A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for …
    CVE-2025-20262 (CVSS 5) — A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Swit…
    CVE-2025-20290 (CVSS 5.5) — A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nex…
    CVE-2024-20284 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20285 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20286 (CVSS 5.3) — A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged…
    CVE-2024-20399 (CVSS 6) — A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administ…
    CVE-2021-34714 (CVSS 7.4) — A vulnerability in the Unidirectional Link Detection (UDLD) feature of Cisco FXOS Software, Cisco IOS Software…
    CVE-2021-1590 (CVSS 5.3) — A vulnerability in the implementation of the system login block-for command for Cisco NX-OS Software could all…
    CVE-2021-1588 (CVSS 8.6) — A vulnerability in the MPLS Operation, Administration, and Maintenance (OAM) feature of Cisco NX-OS Software c…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High