CVE-2011-2058: Cisco IOS

High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days.

The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports, which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs), aka Bug ID CSCtq36336.

Affected products

• Cisco IOS: from 12.2, before 12.2\(33\)sxi7 (fixed in 12.2\(33\)sxi7)

Published 2011-10-22. Last modified 2026-06-16.