« Volver al listado

CVE-2011-0396

Estado: ModificadaAlta (7.8)—

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (17)

Cisco — Adaptive Security ApplianceCisco — Adaptive Security Appliance SoftwareCisco — ASA 5500Cisco — ASA 5505Cisco — ASA 5510Cisco — ASA 5520Cisco — ASA 5540Cisco — ASA 5550Cisco — ASA 5580Cisco — PIX 500Cisco — PIX 501Cisco — PIX 506eCisco — PIX Firewall 506Cisco — PIX Firewall 515Cisco — PIX Firewall 520Cisco — PIX Firewall 525Cisco — PIX Firewall 535

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-0396",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-02-25T12:00:19.307",
  "references": [
    {
      "url": "http://secunia.com/advisories/43488",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id?1025108",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0493",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65591",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/43488",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1025108",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2011/0493",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/65591",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352."
    },
    {
      "lang": "es",
      "value": "Dispositivos de la serie Cisco Adaptive Security Appliances (ASA) 5500 con el software v8.0 anterior a v8.0 (5.23), v8.1 anterior a v8.1 (2.49), v8.2 anterior a v8.2 (4.1), y v8.3 anterior a v8.3 (2.13), cuando una entidad emisora de certificados (CA) está configurada, permite a atacantes remotos leer archivos arbitrarios a través de vectores no especificados, también conocido como error ID CSCtk12352"
    }
  ],
  "lastModified": "2026-06-16T23:27:16.770",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81B53285-7486-47E0-8447-44ECA57A392C"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(3\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E0D62E55-845B-49DD-93AA-9D8E7B755F8E"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(4\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "33E6756C-407E-4236-85A1-953F9FF6799A"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.0\\(5\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "825E3056-F420-476D-957E-A22B164BD0F0"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.1\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CC516FF2-7C0D-4F58-B61B-34FE7294DC1B"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.1\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BDD95F2F-1C0E-4673-AE36-1BAF40EC7CC0"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A904D03-264C-4B01-B2B6-12455106B37D"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.2\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "74826084-14BB-47C4-9EE3-56C3CF206724"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.2\\(2\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CFA73BA5-D1C5-4561-86F1-5B37C64374E1"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance:8.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CDEA2295-5B38-45BC-9099-5A448482FB59"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4AFE6E41-E5C3-48AA-A534-A1AF3E86E3F0"
            },
            {
              "criteria": "cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\\(1\\):*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "31BA0ED9-6962-4E19-89A1-1724AADEC669"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:asa_5500:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FCBA3A3-7C8F-481A-9BEC-78981547F8BE"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5505:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "46FB0E87-E81A-4DF8-8A01-0D0727949D87"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5510:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CCFC8F36-ABFD-429F-AC2C-60BB481EECB9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5520:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1BBFC985-514D-477B-B881-BB8ABEDFA59B"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5540:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "193CF237-BBE5-4016-8167-24808FA52CBD"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5550:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "427C9F27-ACE4-416B-9723-2AEECF9AB9CF"
            },
            {
              "criteria": "cpe:2.3:h:cisco:asa_5580:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A5F5BF0-E96E-4FD3-B210-1E0F96AF4249"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2706D3BA-37A2-4D71-94DD-5386F5C94374"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_501:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01B0A1E7-F882-4FD8-811A-3D6D0A9FC938"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_506e:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2F353E8D-FE19-4683-BD35-FFBF503C45DE"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_firewall_506:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E346F334-9BA3-4BDC-8D0F-D749A7D76E66"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_firewall_515:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F6EE5C14-F556-48A5-BB3F-5465DC823B85"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_firewall_520:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32E437F4-1B19-4B57-9EAD-3AC04717E389"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_firewall_525:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "29B2019F-DF6E-4924-B0D2-37094B5265F9"
            },
            {
              "criteria": "cpe:2.3:h:cisco:pix_firewall_535:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9600B7CF-4AEB-4319-8EF4-4FEA40EF6367"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}