PT-2011-3565 · Cisco · Cisco Ios

Publicado 2011-10-22 · Atualizado 2020-08-05 · CVE-2011-2058

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions prior to 12.2(33)SXI7

Description The issue is related to the cat6000-dot1x component, which does not properly handle an external loop between a pair of dot1x enabled ports. This allows remote attackers to cause a denial of service, also known as a traffic storm, via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs).

Recommendations For versions prior to 12.2(33)SXI7, update to version 12.2(33)SXI7 or later to resolve the issue. As a temporary workaround, consider restricting the use of dot1x enabled ports to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2011-2058

Produtos afetados

Cisco Ios

Referências · 2

• http://cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-2058 · Nota de Segurança