« Volver al listado

CVE-2011-2547

Estado: ModificadaAlta (9)—

The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Cisco — Sa500 SoftwareCisco — Sa520Cisco — Sa520wCisco — Sa540

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-2547",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C",
          "authentication": "SINGLE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-07-28T22:55:02.140",
  "references": [
    {
      "url": "http://secunia.com/advisories/45355",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://securitytracker.com/id?1025810",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/48810",
      "source": "psirt@cisco.com"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68738",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://secunia.com/advisories/45355",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://securitytracker.com/id?1025810",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/48810",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/68738",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681."
    },
    {
      "lang": "es",
      "value": "La interfaz de gestión basada en la web aplicativos de seguridad de Cisco SA 500 ??Series con el software anterior a v2.1.19 permite a usuarios remotos autenticados ejecutar código de su elección a través de los parámetros manipulados en formularios web, también conocido como Bug ID CSCtq65681."
    }
  ],
  "lastModified": "2026-06-16T23:31:34.580",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F34CEB78-9F68-4BF7-BB70-7AF03524CA9D",
              "versionEndIncluding": "2.1.18"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:1.0.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "988B2905-DE56-417F-BDFC-26C3120F4FE9"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:1.0.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0B1DCFEE-D2CA-46EC-B92B-7BC6D84A863F"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:1.0.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C6969B8E-BA94-4E5C-8864-886EC7DB5568"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:1.0.39:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3F3EFD6F-BCA3-4578-ACB7-CDA48C66F8A8"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:1.1.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C8D0F427-03DB-4B77-AD44-2CF30A3A8468"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:1.1.42:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9D1CC976-BE22-4C5B-A877-ED78544C2730"
            },
            {
              "criteria": "cpe:2.3:a:cisco:sa500_software:1.1.65:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "CE089465-47D4-48EC-878A-B045E78A6D7A"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:sa520:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "41EA22A9-7330-473D-A8F6-625EACF21B35"
            },
            {
              "criteria": "cpe:2.3:h:cisco:sa520w:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5C7A7463-BCAC-4DD8-920A-2D3134D3B579"
            },
            {
              "criteria": "cpe:2.3:h:cisco:sa540:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "86F2ED99-EB36-4FB6-8404-BF0DDD2B2AEA"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}