Lucene search

K
cve[email protected]CVE-2011-0364
HistoryFeb 19, 2011 - 1:00 a.m.

CVE-2011-0364

2011-02-1901:00:00
CWE-94
web.nvd.nist.gov
27
cve-2011-0364
cisco
security agent
management console
arbitrary code execution
remote attack

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.638 Medium

EPSS

Percentile

97.8%

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

7.3 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.638 Medium

EPSS

Percentile

97.8%