CVE-2011-3285
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 through 8.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors, aka Bug ID CSCth63101.
Vulnerabilidad de ejecución CRLF en /+CSCOE+/logon.html en Cisco Adaptive Security Appliances (ASA) 5500 con software v8.0 a v8.4 permite a atacantes remotos inyectar cabeceras HTTP arbitrarias y llevar a cabo ataques de división de respuesta HTTP a través de vectores no especificados, también conocido como Bug ID CSCth63101.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-08-29 CVE Reserved
- 2012-05-02 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| http://www.cisco.com/web/software/280775065/37740/ASA-805-Interim-Release-Notes.html | X_refsource_confirm |
|
| http://www.securitytracker.com/id?1027008 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/75343 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0\(2\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0\(3\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0\(3\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0\(4\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0\(4\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0\(5\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0\(5\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0.2 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0.3 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.0.5 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.0.5" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(1\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(1\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(2\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(3\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(3\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(3.9\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(3.9\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(4\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(4\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(4.1\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(4.1\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(4.4\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(4.4\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2\(5\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2\(5\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2.2 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2.2 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2.2" | interim |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.2.3 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.2.3" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.3\(1\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.3\(1\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.3\(2\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.3\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.3.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.3.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.3.1 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.3.1" | interim |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.3.2 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.3.2" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.4 Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.4" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.4\(1\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.4\(1\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.4\(1.11\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.4\(1.11\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.4\(2\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.4\(2\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|
| Cisco Search vendor "Cisco" | Adaptive Security Appliance Software Search vendor "Cisco" for product "Adaptive Security Appliance Software" | 8.4\(2.11\) Search vendor "Cisco" for product "Adaptive Security Appliance Software" and version "8.4\(2.11\)" | - |
Affected
| in | Cisco Search vendor "Cisco" | 5500 Series Adaptive Security Appliance Search vendor "Cisco" for product "5500 Series Adaptive Security Appliance" | * | - |
Affected
|