Unscored severity · published Feb 18, 2011
CVE-2011-0364
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via…
–
CVSS
19.6%
EPSS
No
On KEV
Description
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
Exploitation
Is it being used?
Exploit prediction (EPSS)19.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SA
Security Agent · Cisco
5.1; 5.2; 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0364
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0364
Vendor Advisory
http://secunia.com/advisories/43383
Vendor Advisory
http://secunia.com/advisories/43393
securityreason.com
http://securityreason.com/securityalert/8095
securityreason.com
http://securityreason.com/securityalert/8197
securityreason.com
http://securityreason.com/securityalert/8205
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
More from Security Agent
–
CVE-2010-0148
Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via "a series of…
–
CVE-2010-0147
SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated…
–
CVE-2010-0146
Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors
–
CVE-2007-5580
Buffer overflow in a certain driver in Cisco Security Agent 4.5.1 before 4.5.1.672, 5.0 before 5.0.0.225, 5.1 before 5.1.0.106, and 5.2 before 5.2.0.238 on Windows allows remote…
–
CVE-2007-1067
Cisco Secure Services Client (CSSC) 4.x, Trust Agent 1.x and 2.x, Cisco Security Agent (CSA) 5.0 and 5.1 (when a vulnerable Trust Agent has been deployed), and the Meetinghouse…