Lucene search
HistoryOct 06, 2011 - 10:55 a.m.
CVE-2011-3298
7.9 High
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.8%
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.3), 8.0 before 8.0(5.24), 8.1 before 8.1(2.50), 8.2 before 8.2(5), 8.3 before 8.3(2.18), 8.4 before 8.4(1.10), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to bypass authentication via a crafted TACACS+ reply, aka Bug IDs CSCto40365 and CSCto74274.
Affected configurations
Node
ciscoadaptive_security_appliance_softwareMatch7.0
ORciscoadaptive_security_appliance_softwareMatch7.0\(0\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(1\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(2\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(4\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(5\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(5.2\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(6\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(6.7\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(7\)
ORciscoadaptive_security_appliance_softwareMatch7.0\(8\)
ORciscoadaptive_security_appliance_softwareMatch7.0.1
ORciscoadaptive_security_appliance_softwareMatch7.0.1.4
ORciscoadaptive_security_appliance_softwareMatch7.0.2
ORciscoadaptive_security_appliance_softwareMatch7.0.4
ORciscoadaptive_security_appliance_softwareMatch7.0.4.3
ORciscoadaptive_security_appliance_softwareMatch7.0.5
ORciscoadaptive_security_appliance_softwareMatch7.0.6
ORciscoadaptive_security_appliance_softwareMatch7.0.7
ORciscoadaptive_security_appliance_softwareMatch7.0.8
ORciscoadaptive_security_appliance_softwareMatch7.0.8interim
ORciscoadaptive_security_appliance_softwareMatch7.1
ORciscoadaptive_security_appliance_softwareMatch7.2
ORciscoadaptive_security_appliance_softwareMatch7.2\(1\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(1.22\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.5\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.7\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.8\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.10\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.14\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.15\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.16\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.17\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.18\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.19\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(2.48\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(3\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(4\)
ORciscoadaptive_security_appliance_softwareMatch7.2\(5\)
ORciscoadaptive_security_appliance_softwareMatch7.2.1
ORciscoadaptive_security_appliance_softwareMatch7.2.2
ORciscoadaptive_security_appliance_softwareMatch7.2.3
ORciscoadaptive_security_appliance_softwareMatch7.2.4
ORciscoadaptive_security_appliance_softwareMatch7.2.5
ORciscoadaptive_security_appliance_softwareMatch8.0
ORciscoadaptive_security_appliance_softwareMatch8.0\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.0\(3\)
ORciscoadaptive_security_appliance_softwareMatch8.0\(4\)
ORciscoadaptive_security_appliance_softwareMatch8.0\(5\)
ORciscoadaptive_security_appliance_softwareMatch8.0.2
ORciscoadaptive_security_appliance_softwareMatch8.0.3
ORciscoadaptive_security_appliance_softwareMatch8.0.4
ORciscoadaptive_security_appliance_softwareMatch8.0.5
ORciscoadaptive_security_appliance_softwareMatch8.1
ORciscoadaptive_security_appliance_softwareMatch8.2\(1\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(3\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(3.9\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(4\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(4.1\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(4.4\)
ORciscoadaptive_security_appliance_softwareMatch8.2\(5\)
ORciscoadaptive_security_appliance_softwareMatch8.2.1
ORciscoadaptive_security_appliance_softwareMatch8.2.2
ORciscoadaptive_security_appliance_softwareMatch8.2.2interim
ORciscoadaptive_security_appliance_softwareMatch8.3\(1\)
ORciscoadaptive_security_appliance_softwareMatch8.3\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.4\(1\)
ORciscoadaptive_security_appliance_softwareMatch8.4\(1.11\)
ORciscoadaptive_security_appliance_softwareMatch8.4\(2\)
ORciscoadaptive_security_appliance_softwareMatch8.5
ORciscoadaptive_security_appliance_softwareMatch8.5\(1\)
cisco5500_series_adaptive_security_appliance
ORciscoasa_5500
Node
ciscofirewall_services_module_softwareMatch3.1
ORciscofirewall_services_module_softwareMatch3.1\(2\)
ORciscofirewall_services_module_softwareMatch3.1\(3\)
ORciscofirewall_services_module_softwareMatch3.1\(4\)
ORciscofirewall_services_module_softwareMatch3.1\(5\)
ORciscofirewall_services_module_softwareMatch3.1\(6\)
ORciscofirewall_services_module_softwareMatch3.1\(7\)
ORciscofirewall_services_module_softwareMatch3.1\(8\)
ORciscofirewall_services_module_softwareMatch3.1\(9\)
ORciscofirewall_services_module_softwareMatch3.1\(10\)
ORciscofirewall_services_module_softwareMatch3.1\(11\)
ORciscofirewall_services_module_softwareMatch3.1\(12\)
ORciscofirewall_services_module_softwareMatch3.1\(13\)
ORciscofirewall_services_module_softwareMatch3.1\(14\)
ORciscofirewall_services_module_softwareMatch3.1\(15\)
ORciscofirewall_services_module_softwareMatch3.1\(16\)
ORciscofirewall_services_module_softwareMatch3.1\(17\)
ORciscofirewall_services_module_softwareMatch3.1\(18\)
ORciscofirewall_services_module_softwareMatch3.1\(19\)
ORciscofirewall_services_module_softwareMatch3.1\(20\)
ORciscofirewall_services_module_softwareMatch3.2
ORciscofirewall_services_module_softwareMatch3.2\(1\)
ORciscofirewall_services_module_softwareMatch3.2\(2\)
ORciscofirewall_services_module_softwareMatch3.2\(3\)
ORciscofirewall_services_module_softwareMatch3.2\(4\)
ORciscofirewall_services_module_softwareMatch3.2\(5\)
ORciscofirewall_services_module_softwareMatch3.2\(6\)
ORciscofirewall_services_module_softwareMatch3.2\(7\)
ORciscofirewall_services_module_softwareMatch3.2\(8\)
ORciscofirewall_services_module_softwareMatch3.2\(9\)
ORciscofirewall_services_module_softwareMatch3.2\(10\)
ORciscofirewall_services_module_softwareMatch3.2\(11\)
ORciscofirewall_services_module_softwareMatch3.2\(12\)
ORciscofirewall_services_module_softwareMatch3.2\(13\)
ORciscofirewall_services_module_softwareMatch3.2\(14\)
ORciscofirewall_services_module_softwareMatch3.2\(15\)
ORciscofirewall_services_module_softwareMatch3.2\(16\)
ORciscofirewall_services_module_softwareMatch3.2\(17\)
ORciscofirewall_services_module_softwareMatch3.2\(18\)
ORciscofirewall_services_module_softwareMatch3.2\(19\)
ORciscofirewall_services_module_softwareMatch3.2\(20\)
ORciscofirewall_services_module_softwareMatch3.2\(21\)
ORciscofirewall_services_module_softwareMatch4.0
ORciscofirewall_services_module_softwareMatch4.0\(1\)
ORciscofirewall_services_module_softwareMatch4.0\(2\)
ORciscofirewall_services_module_softwareMatch4.0\(3\)
ORciscofirewall_services_module_softwareMatch4.0\(4\)
ORciscofirewall_services_module_softwareMatch4.0\(5\)
ORciscofirewall_services_module_softwareMatch4.0\(6\)
ORciscofirewall_services_module_softwareMatch4.0\(7\)
ORciscofirewall_services_module_softwareMatch4.0\(8\)
ORciscofirewall_services_module_softwareMatch4.0\(10\)
ORciscofirewall_services_module_softwareMatch4.0\(11\)
ORciscofirewall_services_module_softwareMatch4.0\(12\)
ORciscofirewall_services_module_softwareMatch4.0\(13\)
ORciscofirewall_services_module_softwareMatch4.0\(14\)
ORciscofirewall_services_module_softwareMatch4.0\(15\)
ORciscofirewall_services_module_softwareMatch4.1
ORciscofirewall_services_module_softwareMatch4.1\(1\)
ORciscofirewall_services_module_softwareMatch4.1\(2\)
ORciscofirewall_services_module_softwareMatch4.1\(3\)
ORciscofirewall_services_module_softwareMatch4.1\(4\)
ORciscofirewall_services_module_softwareMatch4.1\(5\)
ORciscofirewall_services_module_softwareMatch4.1\(6\)
ciscocatalyst_6500
ORciscocatalyst_7600
Related
cve
cve
CVE-2011-3298
2011-10-06 10:55:05
prion
prion
Authentication flaw
2011-10-06 10:55:00
cvelist
cvelist
CVE-2011-3298
2011-10-06 10:00:00
nessus
nessus
Cisco ASA 5500 Series Multiple Vulnerabilities (cisco-sa-20111005-asa)
2011-10-25 00:00:00
securityvulns
securityvulns
Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module
2011-10-10 00:00:00
Cisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services Module
2011-10-10 00:00:00
Cisco ASA / Cisco FSM multiple security vulnerabilities
2011-10-10 00:00:00
cisco
cisco
7.9 High
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:M/Au:N/C:C/I:C/A:C
6.7 Medium
AI Score
Confidence
Low
0.007 Low
EPSS
Percentile
79.8%
Related for NVD:CVE-2011-3298