CVE-2011-0348
Estado: ModificadaMedia (6.4)—
Gravedad6.4Media · CVSS 2.0
Probabilidad de explotación2.27 %mayor que el 83 % de las CVE
Explotación activaNono figura en el catálogo de CISA
Exploit públicoNo conocidosin código público localizado
Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD antes de 12.4(24)MD3, 12.4(22)MDA anterior a 12.4(22)MDA5, y 12.4(24)MDA anterior a 12.4(24)MDA3 en el Cisco Content Services Gateway de segunda generación (también conocido como CSG2) permite a atacantes remotos evitar las restricciones de acceso establecidas y restricciones de facturación mediante el envío de tráfico HTTP a un destino restringido después de enviar el tráfico HTTP a un destino sin restricciones, también conocido como Bug ID CSCtk35917.
CVSS
- Puntuación base
- 6.4
- Versión
- 2.0
- Vector
- AV:N/AC:L/Au:N/C:P/I:P/A:N
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días
- 2.27 %
- Percentil entre todas las CVEs puntuadas
- 83
- Fecha de la puntuación
- 21/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-264
Referencias
Mostrar las 14 referencias
- http://osvdb.org/70720
- http://secunia.com/advisories/43052
- http://securitytracker.com/id?1024992
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml
- http://www.securityfocus.com/bid/46022
- http://www.vupen.com/english/advisories/2011/0229
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64936
- http://osvdb.org/70720
- http://secunia.com/advisories/43052
- http://securitytracker.com/id?1024992
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml
- http://www.securityfocus.com/bid/46022
- http://www.vupen.com/english/advisories/2011/0229
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64936
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-0348",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.4,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 4.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-01-28T22:00:05.787",
"references": [
{
"url": "http://osvdb.org/70720",
"source": "psirt@cisco.com"
},
{
"url": "http://secunia.com/advisories/43052",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://securitytracker.com/id?1024992",
"source": "psirt@cisco.com"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/46022",
"source": "psirt@cisco.com"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0229",
"source": "psirt@cisco.com"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64936",
"source": "psirt@cisco.com"
},
{
"url": "http://osvdb.org/70720",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/43052",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1024992",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/46022",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2011/0229",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64936",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917."
},
{
"lang": "es",
"value": "Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD antes de 12.4(24)MD3, 12.4(22)MDA anterior a 12.4(22)MDA5, y 12.4(24)MDA anterior a 12.4(24)MDA3 en el Cisco Content Services Gateway de segunda generación (también conocido como CSG2) permite a atacantes remotos evitar las restricciones de acceso establecidas y restricciones de facturación mediante el envío de tráfico HTTP a un destino restringido después de enviar el tráfico HTTP a un destino sin restricciones, también conocido como Bug ID CSCtk35917."
}
],
"lastModified": "2026-06-16T23:27:13.193",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:cisco:ios:12.4\\(11\\)md:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "92AD4889-F6B6-4497-A589-8632A1850965"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4\\(15\\)md:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE0233F4-AA5D-47C3-934A-4BA793DD4A2E"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4\\(22\\)md:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "498A43E2-5A03-46C9-B60D-8E7CE79F1705"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4\\(22\\)mda:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6EB30791-A691-42DD-8714-B173242EDBBF"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4\\(24\\)md:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "539454C8-EA90-4146-9429-72465CF555FE"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4\\(24\\)md1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E44F5F4-D7FE-4B9C-BA65-2365EF7A8092"
},
{
"criteria": "cpe:2.3:o:cisco:ios:12.4\\(24\\)mda:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D0F2A946-AD8A-4644-8630-5951B66E4B34"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:content_services_gateway_second_generation:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A7759766-DE4B-42DE-BFB9-0EA6E08C89F6"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}