Cisco Nexus 5000 and 3000 Series Switches ACL Security Bypass Vulnerability

Bugtraq ID:	49490
Class:	Design Error
CVE:	CVE-2011-2581
Remote:	Yes
Local:	No
Published:	Sep 07 2011 12:00AM
Updated:	Mar 19 2015 08:42AM
Credit:	Cisco
Vulnerable:	Cisco NX-OS 5.0(3) Cisco NX-OS 5.0(2) Cisco NX-OS 5.0 Cisco Nexus 5000 0 Cisco Nexus 3000 0
Not Vulnerable:	Cisco NX-OS 5.0(3)U2(1) Cisco NX-OS 5.0(3)U1(2a) Cisco NX-OS 5.0(3)N2(1)

Cisco Nexus 5000 and 3000 Series Switches ACL Security Bypass Vulnerability

Cisco Nexus 5000 and 3000 series switches are prone to a security-bypass vulnerability.

An attacker can exploit this issue to bypass access control lists (ACLs) and gain access to restricted resources. This may aid in further attacks.

This issue is documented by the Cisco Bug IDs CSCto09813 and CSCtr61490.

Cisco Nexus 5000 and 3000 Series Switches ACL Security Bypass Vulnerability

Attackers can use readily available networking tools to exploit this issue.

Cisco Nexus 5000 and 3000 Series Switches ACL Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for details.

Cisco Nexus 5000 and 3000 Series Switches ACL Security Bypass Vulnerability

References:

• Cisco Nexus 3000 Series Switches Homepage (Cisco)
  
• Cisco Nexus 5000 Series Switches Homepage (Cisco)
  
• Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Contro (Cisco)
  
• Cisco Security Advisory: Cisco Nexus 5000 and 3000 Series Switches Access Contro (Cisco)