CVE-2011-2058
Last modified
CVE-2011-2058 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs), aka Bug ID CSCtq36336.. EPSS estimates a 1.82% chance of exploitation in the next 30 days.
Description
The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs), aka Bug ID CSCtq36336.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | >= 12.2, < 12.2\(33\)sxi7 |
References
- http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.htmlRelease Notes, Vendor Advisory
- http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/release/notes/caveats_SXI_rebuilds.htmlRelease Notes, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-2058?
How severe is CVE-2011-2058?
How do I fix CVE-2011-2058?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-2039The helper application in Cisco AnyConnect Secure Mobility C…
- CVE-2011-2040The helper application in Cisco AnyConnect Secure Mobility C…
- CVE-2011-2041The Start Before Logon (SBL) functionality in Cisco AnyConne…
- CVE-2011-2042The Sybase SQL Anywhere database component in Cisco CiscoWor…
- CVE-2011-2054A vulnerability in the Cisco ASA that could allow a remote a…7.5
- CVE-2011-2057The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33…7.5
- CVE-2011-2059The ipv6 component in Cisco IOS before 15.1(4)M1.3 allows re…
- CVE-2011-2060The platform-sw component on Cisco Adaptive Security Applian…
- CVE-2011-2064Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content S…
- CVE-2011-2072Memory leak in Cisco IOS 12.4, 15.0, and 15.1, Cisco IOS XE …
- CVE-2011-2074Unspecified vulnerability in the client in Skype 5.x before …
- CVE-2011-2075Unspecified vulnerability in Google Chrome 11.0.696.65 on Wi…
Are you affected by CVE-2011-2058?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST