Unscored severity · published Oct 20, 2011
CVE-2011-3310
The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service…
–
CVSS
15.2%
EPSS
No
On KEV
Description
The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.
Exploitation
Is it being used?
Exploit prediction (EPSS)15.2% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Windows · Microsoft
All versions, or not specified · source: NVD
CC
Ciscoworks Common Services · Cisco
through 4.0.1; 2.2; 3.0.5; 3.0.6; 3.1; 3.1.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2011-3310
CVE.org
https://www.cve.org/CVERecord?id=CVE-2011-3310
secunia.com
http://secunia.com/advisories/46533
Vendor Advisory
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-cs
www.securityfocus.com
http://www.securityfocus.com/bid/50284
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/70759
More from Windows
10.0
CVE-2020-1350
Microsoft Windows DNS Server Remote Code Execution Vulnerability
9.8
CVE-2025-59287
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
9.8
CVE-2019-0708
Microsoft Remote Desktop Services Remote Code Execution Vulnerability
9.8
CVE-2017-8543
Microsoft Windows Search Remote Code Execution Vulnerability
9.8
CVE-2008-4250
Microsoft Windows Buffer Overflow Vulnerability