CVE-2011-2054

Cisco ASA Secondary Authentication Bypass Vulnerability

Severity Score

7.5

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

Track

*SSVC

Descriptions

A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability.

Una vulnerabilidad en el Cisco ASA , podría permitir a atacantes remotos una autenticación con éxito usando el cliente Cisco AnyConnect VPN si el tipo Secondary Authentication es LDAP y la contraseña se deja en blanco, siempre que las credenciales principales sean correctas. Estas vulnerabilidades son debido a una comprobación de entrada inapropiada de determinados parámetros pasados ??al software afectado. Un atacante debe tener las credenciales principales correctas a fin de explotar con éxito esta vulnerabilidad.

*Credits: N/A

CVSS Scores

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Attack Vector

Network

Attack Complexity

Medium

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:Track

Exploitation

None

Automatable

Tech. Impact

Partial

* Organization's Worst-case Scenario

Timeline

2011-05-10 CVE Reserved
2020-02-19 CVE Published
2024-09-17 EPSS Updated
2024-11-15 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-287: Improper Authentication

CAPEC

References (1)

URL	Tag	Source

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
https://quickview.cloudapps.cisco.com/quickview/bug/CSCtq58884	2020-02-24

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Cisco Search vendor "Cisco"	Asa 5500 Firmware Search vendor "Cisco" for product "Asa 5500 Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5500 Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5500 Search vendor "Cisco" for product "Asa 5500"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5510 Firmware Search vendor "Cisco" for product "Asa 5510 Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5510 Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5510 Search vendor "Cisco" for product "Asa 5510"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5512-x Firmware Search vendor "Cisco" for product "Asa 5512-x Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5512-x Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5512-x Search vendor "Cisco" for product "Asa 5512-x"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5515-x Firmware Search vendor "Cisco" for product "Asa 5515-x Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5515-x Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5515-x Search vendor "Cisco" for product "Asa 5515-x"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5520 Firmware Search vendor "Cisco" for product "Asa 5520 Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5520 Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5520 Search vendor "Cisco" for product "Asa 5520"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5525-x Firmware Search vendor "Cisco" for product "Asa 5525-x Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5525-x Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5525-x Search vendor "Cisco" for product "Asa 5525-x"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5540 Firmware Search vendor "Cisco" for product "Asa 5540 Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5540 Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5540 Search vendor "Cisco" for product "Asa 5540"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5545-x Firmware Search vendor "Cisco" for product "Asa 5545-x Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5545-x Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5545-x Search vendor "Cisco" for product "Asa 5545-x"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5550 Firmware Search vendor "Cisco" for product "Asa 5550 Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5550 Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5550 Search vendor "Cisco" for product "Asa 5550"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5555-x Firmware Search vendor "Cisco" for product "Asa 5555-x Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5555-x Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5555-x Search vendor "Cisco" for product "Asa 5555-x"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5580 Firmware Search vendor "Cisco" for product "Asa 5580 Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5580 Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5580 Search vendor "Cisco" for product "Asa 5580"	-	-	Safe
Cisco Search vendor "Cisco"	Asa 5585-x Firmware Search vendor "Cisco" for product "Asa 5585-x Firmware"	8.4\(1\) Search vendor "Cisco" for product "Asa 5585-x Firmware" and version "8.4\(1\)"	-	Affected	in	Cisco Search vendor "Cisco"	Asa 5585-x Search vendor "Cisco" for product "Asa 5585-x"	-	-	Safe