CVE-2011-2569: Medium severity cisco nx-os vulnerability

Published Oct 27, 2011

Updated

Cisco Nexus OS (aka NX-OS) 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188.

Affected Software

5 affected components

Cisco NX-OS=5.0

Cisco NX-OS=4.2

Cisco Unified Computing System

Cisco Unified Computing System Infrastructure And Unified Computing System Software=1.4\(1j\)

Cisco Unified Computing System Infrastructure And Unified Computing System Software=2.0\(1q\)

Event History

Oct 27, 2011

CVE Published

via MITRE·09:00 PM

Data Sourced

via MITRE·09:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2011-2569?

CVE-2011-2569 is classified with a medium severity due to its potential for privilege escalation by local users.

How do I fix CVE-2011-2569?

To fix CVE-2011-2569, update Cisco NX-OS to version 5.0 or later, or Cisco Unified Computing System software to version 2.0(1q) or later.

Who is affected by CVE-2011-2569?

Organizations using Cisco NX-OS versions 4.2 and 5.0 or Cisco Unified Computing System software versions 1.4 and 2.0 are affected.

What is the impact of CVE-2011-2569?

The impact of CVE-2011-2569 allows local users to gain higher privileges, which can lead to unauthorized access and potential manipulation of system settings.

When was CVE-2011-2569 disclosed?

CVE-2011-2569 was disclosed in 2011, highlighting vulnerabilities in Cisco networking software.