Vulnerability in Cisco Content Services Gateway Second Generation
CVE-2011-0348
Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 6.4 (Medium). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.023 (82.3th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 82.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.023 · newest: 0.023 · change: 0.000
Affected products
- Cisco Content Services Gateway Second Generation
- Cisco iOS — versions 12.4\(22\)mda, 12.4(24)mda, 12.4(11)md
Weakness classification (CWE)
References
- www.securityfocus.com/bid/46022 (vdb-entry)
- www.vupen.com/english/advisories/2011/0229 (vdb-entry)
- www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml (vendor-advisory, Vendor Advisory)
- osvdb.org/70720 (vdb-entry)
- secunia.com/advisories/43052 (Vendor Advisory, third-party-advisory)
- securitytracker.com/id (vdb-entry)
- exchange.xforce.ibmcloud.com/vulnerabilities/64936 (vdb-entry)