Unscored severity · published Feb 25, 2011
CVE-2011-0396
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AS
Adaptive Security Appliance · Cisco
8.0(2); 8.0(3); 8.0(4); 8.0(5); 8.1(1); 8.1(2); +4 more · source: NVD
AS
Adaptive Security Appliance Software · Cisco
8.0; 8.3(1) · source: NVD
A5
Asa 5500 · Cisco
All versions, or not specified · source: NVD
A5
Asa 5505 · Cisco
All versions, or not specified · source: NVD
A5
Asa 5510 · Cisco
All versions, or not specified · source: NVD
A5
Asa 5520 · Cisco
All versions, or not specified · source: NVD
A5
Asa 5540 · Cisco
All versions, or not specified · source: NVD
A5
Asa 5550 · Cisco
All versions, or not specified · source: NVD
A5
Asa 5580 · Cisco
All versions, or not specified · source: NVD
P5
Pix 500 · Cisco
All versions, or not specified · source: NVD
P5
Pix 501 · Cisco
All versions, or not specified · source: NVD
P5
Pix 506e · Cisco
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-0396
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-0396
secunia.com
http://secunia.com/advisories/43488
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml
www.securitytracker.com
http://www.securitytracker.com/id?1025108
www.vupen.com
http://www.vupen.com/english/advisories/2011/0493
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/65591
More from Adaptive Security Appliance
8.6
CVE-2024-20353
Cisco ASA and FTD Denial of Service Vulnerability
6.0
CVE-2024-20359
Cisco ASA and FTD Privilege Escalation Vulnerability
8.6
CVE-2021-34793
A vulnerability in the TCP Normalizer of Cisco Adaptive Security Appliance (ASA) Software and Firepower Threat Defense (FTD) Software operating in transparent mode could allow an…
8.6
CVE-2020-3572
A vulnerability in the SSL/TLS session handler of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an…
8.6
CVE-2020-3436
A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote…