RCE in Cisco Security_agent
CVE-2011-0364
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
Vulnerability class: RCE (Remote Code Execution)
EPSS: 0.196 (97.1th percentile) — read the EPSS interpretation.
Affected products
- Cisco Security_agent — versions 5.1, 5.2, 6.0
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- psirt@cisco.com (x_refsource_SREASON, third-party-advisory)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (x_refsource_MISC)
- psirt@cisco.com (mailing-list, x_refsource_BUGTRAQ)
- psirt@cisco.com (x_refsource_SREASON, third-party-advisory)
- psirt@cisco.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- psirt@cisco.com (x_refsource_SREASON, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_BID)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
Frequently asked questions
- What is CVE-2011-0364?
- CVE-2011-0364 is a vulnerability in Cisco Security_agent, classified under Code Injection. Published 2011-02-19.
- Is CVE-2011-0364 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.