Vulnerability in Cisco iOS

CVE-2011-3289

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640.

EPSS: 0.003 (27.2th percentile) — read the EPSS interpretation.

Affected products

  • Cisco Ios — versions 12.4, 15.0, 15.1
  • N/a — versions n/a

Weakness classification (CWE)

References