Cisco Nexus 3000 and 5000 Permissions, Privileges, and Access Controls (CVE-2011-2581)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(502730);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/11/21");

  script_cve_id("CVE-2011-2581");

  script_name(english:"Cisco Nexus 3000 and 5000 Permissions, Privileges, and Access Controls (CVE-2011-2581)");

  script_set_attribute(attribute:"synopsis", value:
"The remote OT asset is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The ACL implementation in Cisco NX-OS 5.0(2) and 5.0(3) before
5.0(3)N2(1) on Nexus 5000 series switches, and NX-OS before
5.0(3)U1(2a) on Nexus 3000 series switches, does not properly handle
comments in conjunction with deny statements, which allows remote
attackers to bypass intended access restrictions in opportunistic
circumstances by sending packets, aka Bug IDs CSCto09813 and
CSCtr61490.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.");
  script_set_attribute(attribute:"see_also", value:"http://secunia.com/advisories/45883");
  # http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?38d622ce");
  script_set_attribute(attribute:"see_also", value:"http://www.securitytracker.com/id?1026019");
  script_set_attribute(attribute:"see_also", value:"http://secunia.com/advisories/45883");
  # http://www.cisco.com/en/US/products/products_security_advisory09186a0080b9250c.shtml
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?38d622ce");
  script_set_attribute(attribute:"see_also", value:"http://www.securitytracker.com/id?1026019");
  script_set_attribute(attribute:"solution", value:
"Refer to the vendor advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2011-2581");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");
  script_cwe_id(264);

  script_set_attribute(attribute:"vuln_publication_date", value:"2011/09/14");
  script_set_attribute(attribute:"patch_publication_date", value:"2011/09/14");
  script_set_attribute(attribute:"plugin_publication_date", value:"2024/12/04");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nexus_5000_series_switches:5.0%283%29N2%281%29");
  script_set_attribute(attribute:"cpe", value:"cpe:/o:cisco:nexus_3000_series_switches:5.0%283%29U1%282a%29");
  script_set_attribute(attribute:"generated_plugin", value:"former");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Tenable.ot");

  script_copyright(english:"This script is Copyright (C) 2024-2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("tenable_ot_api_integration.nasl");
  script_require_keys("Tenable.ot/Cisco");

  exit(0);
}


include('tenable_ot_cve_funcs.inc');

get_kb_item_or_exit('Tenable.ot/Cisco');

var asset = tenable_ot::assets::get(vendor:'Cisco');

var vuln_cpes = {
    "cpe:/o:cisco:nexus_5000_series_switches:5.0%283%29N2%281%29" :
        {"versionEndExcluding" : "5.0%283%29N2%281%29", "versionStartIncluding" : "5.0%282%29", "family" : "NXOS"},
    "cpe:/o:cisco:nexus_3000_series_switches:5.0%283%29N2%281%29" :
        {"versionEndExcluding" : "5.0%283%29U1%282a%29", "family" : "NXOS"}
};

tenable_ot::cve::compare_and_report(asset:asset, cpes:vuln_cpes, severity:SECURITY_WARNING);