Auth bypass in Cisco Catalyst 6500
CVE-2011-3297
Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.
Vulnerability class: Broken Authentication
EPSS: 0.014 (70.4th percentile) — read the EPSS interpretation.
Affected products
- Cisco Catalyst_6500
- Cisco Catalyst_7600
- Cisco Firewall_services_module_software — versions 4.0\(12\), 3.1(12), 4.0\(8\)
- N/a — versions n/a
Weakness classification (CWE)
References
- psirt@cisco.com (vdb-entry, x_refsource_XF)
- psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)