CVE-2011-2057

The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication…

published October 22, 2011

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication dot1x enabled port and (2) a loop between a dot1x enabled port and a non-dot1x port, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many Spanning Tree Protocol (STP) Bridge Protocol Data Unit (BPDU) frames, aka Bug ID CSCtq36327.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01783 · 78.0th percentile
Published
2011-10-22T01:00Z
EPSS history
Timeline
  • 22 OCT 01:00Z
    The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication…
    cvelistv5