CVEvulnerability

CVE-2011-0935

10.0 HIGH Published 2011-04-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2011-04-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses: CWE-310

Description

The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact by leveraging an IKE peer relationship in which a key was previously valid but later revoked, aka Bug ID CSCth82164, a different vulnerability than CVE-2010-4685.

Affected configurations

• cisco ios 15.0 • cisco ios 15.1

Weakness · not in database (1)

CWE-310

Referenced by CWE · observed example (1)

CWE-299 Improper Check for Certificate Revocation weakness

References