Unscored severity · published Feb 25, 2011
CVE-2011-0379
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x,…
–
CVSS
2.2%
EPSS
No
On KEV
Description
Buffer overflow on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 1.6.x; Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x; Cisco TelePresence endpoint devices with software 1.2.x through 1.6.x; and Cisco TelePresence Manager 1.2.x, 1.3.x, 1.4.x, 1.5.x, and 1.6.2 allows remote attackers to execute arbitrary code via a crafted Cisco Discovery Protocol packet, aka Bug IDs CSCtd75769, CSCtd75766, CSCtd75754, and CSCtd75761.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
5S
5500 Series Adaptive Security Appliance · Cisco
All versions, or not specified · source: NVD
AS
Adaptive Security Appliance Software · Cisco
1.6.0 · source: NVD
A5
Asa 5500 · Cisco
All versions, or not specified · source: NVD
TM
Telepresence Manager · Cisco
1.2.0.0; 1.3.2; 1.4.0; 1.5.1; 1.5.2; 1.6.2 · source: NVD
TM
Telepresence Multipoint Switch · Cisco
All versions, or not specified · source: NVD
TM
Telepresence Multipoint Switch Software · Cisco
1.0.4.0; 1.1.0; 1.1.1; 1.1.2; 1.5.0; 1.5.1; +10 more · source: NVD
TS
Telepresence System 1000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 1100 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 1300 Series · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3000 · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 3200 Series · Cisco
All versions, or not specified · source: NVD
TS
Telepresence System 500 Series · Cisco
All versions, or not specified · source: NVD
Affected product
5S
5500 Series Adaptive Security Appliance
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0379
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0379
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e11d.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14e.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14f.shtml
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e152.shtml
www.securitytracker.com
http://www.securitytracker.com/id?1025111
www.securitytracker.com
http://www.securitytracker.com/id?1025112
More from 5500 Series Adaptive Security Appliance
–
CVE-2013-1215
The vpnclient program in the Easy VPN component on Cisco Adaptive Security Appliances (ASA) 5505 devices allows local users to gain privileges via unspecified vectors, aka Bug ID…
–
CVE-2012-5415
Race condition on Cisco Adaptive Security Appliances (ASA) devices allows remote attackers to cause a denial of service (CPU consumption or device reload) by establishing multiple…
–
CVE-2013-1149
Cisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8.3(2.34), 8.4 before…
–
CVE-2012-4663
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with…
–
CVE-2012-4662
The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with…