CVEvulnerability
CVE-2011-2546
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-07-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669.
Affected configurations
• cisco sa500 software (<= 2.1.18)
• cisco sa500 software 1.0.14
• cisco sa500 software 1.0.15
• cisco sa500 software 1.0.17
• cisco sa500 software 1.0.39
• cisco sa500 software 1.1.21
• cisco sa500 software 1.1.42
• cisco sa500 software 1.1.65
• cisco sa520
• cisco sa520w
• cisco sa540
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://secunia.com/advisories/45355 Vendor Advisory
- http://securitytracker.com/id?1025810 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml Vendor Advisory
- http://www.securityfocus.com/bid/48812 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68737 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/45355 Vendor Advisory
- http://securitytracker.com/id?1025810 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml Vendor Advisory
- http://www.securityfocus.com/bid/48812 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68737 exchange.xforce.ibmcloud.com