Vulnerability in Cisco Adaptive Security Appliance
CVE-2011-0396
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.
EPSS: 0.014 (70.7th percentile) — read the EPSS interpretation.
Affected products
- Cisco Adaptive_security_appliance — versions 8.3, 8.0(4), 8.2\(2\)
- Cisco Adaptive_security_appliance_software — versions 8.0, 8.3(1), 8.3\(1\)
- Cisco Asa_5500
- Cisco Asa_5505
- Cisco Asa_5510
- Cisco Asa_5520
- Cisco Asa_5540
- Cisco Asa_5550
- Cisco Asa_5580
- Cisco Pix_500
Weakness classification (CWE)
References
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)
- psirt@cisco.com (vdb-entry, x_refsource_SECTRACK)
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_SECUNIA, third-party-advisory)
- psirt@cisco.com (vdb-entry, x_refsource_VUPEN)