CVE:CVE-2011-2581
CNNVD:CNNVD-201109-072
Cisco Nexus 5000系列是Cisco Nexus系列数据中心级交换机的一个组成部分，它提供了一个创新架构，通过实施基于标准的高性能以太网统一阵列，简化了数据中心转型。
Cisco Nexus 5000和3000系列交换机在ACL的实现上存在安全限制绕过漏洞。将ACL摘要配置为ACL拒绝语句之前时可触发此漏洞，允许流量绕过设备上配置ACL拒绝语句。远程攻击者可利用此漏洞绕过访问控制列表，获取受限制资源。
solution:Upgrade cisco nx-os to a higher version than 5.0(2,5.0(3n1(1,5.0(3n1(1a,5.0(3n1(1b,5.0(3,5.0(3n1(1c,5.0\(3\u1\(2\,5.0(3u1(1a,5.0(3u1(1b,5.0(3u1(1d,and avoid the version 5.0(2),5.0(3)n1(1),5.0(3)n1(1a),5.0(3)n1(1b),5.0(3),5.0(3)n1(1c),(,5.0\(3\)u1\(2\)],5.0(3)u1(1a),5.0(3)u1(1b),5.0(3)u1(1d); Upgrade cisco nexus_5000 to a higher version than *; Upgrade cisco nexus_3000 to a higher version than *