CVE-2011-2547
Severity Score
9.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681.
La interfaz de gestión basada en la web aplicativos de seguridad de Cisco SA 500 ??Series con el software anterior a v2.1.19 permite a usuarios remotos autenticados ejecutar código de su elección a través de los parámetros manipulados en formularios web, también conocido como Bug ID CSCtq65681.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-06-27 CVE Reserved
- 2011-07-20 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-264: Permissions, Privileges, and Access Controls
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://securitytracker.com/id?1025810 | Vdb Entry | |
| http://www.securityfocus.com/bid/48810 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/68738 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/45355 | 2017-08-29 | |
| http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml | 2017-08-29 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | <= 2.1.18 Search vendor "Cisco" for product "Sa500 Software" and version " <= 2.1.18" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | <= 2.1.18 Search vendor "Cisco" for product "Sa500 Software" and version " <= 2.1.18" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | <= 2.1.18 Search vendor "Cisco" for product "Sa500 Software" and version " <= 2.1.18" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.14 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.14" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.14 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.14" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.14 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.14" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.15 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.15" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.15 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.15" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.15 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.15" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.17 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.17 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.17 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.17" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.39 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.39" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.39 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.39" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.0.39 Search vendor "Cisco" for product "Sa500 Software" and version "1.0.39" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.21 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.21" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.21 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.21" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.21 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.21" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.42 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.42" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.42 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.42" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.42 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.42" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.65 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.65" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520 Search vendor "Cisco" for product "Sa520" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.65 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.65" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa520w Search vendor "Cisco" for product "Sa520w" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Sa500 Software Search vendor "Cisco" for product "Sa500 Software" | 1.1.65 Search vendor "Cisco" for product "Sa500 Software" and version "1.1.65" | - |
Affected
| in | Cisco Search vendor "Cisco" | Sa540 Search vendor "Cisco" for product "Sa540" | * | - |
Affected
|