CVEvulnerability
CVE-2011-2547
9.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-07-28
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681.
Affected configurations
• cisco sa500 software (<= 2.1.18)
• cisco sa500 software 1.0.14
• cisco sa500 software 1.0.15
• cisco sa500 software 1.0.17
• cisco sa500 software 1.0.39
• cisco sa500 software 1.1.21
• cisco sa500 software 1.1.42
• cisco sa500 software 1.1.65
• cisco sa520
• cisco sa520w
• cisco sa540
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/45355 Vendor Advisory
- http://securitytracker.com/id?1025810 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml Vendor Advisory
- http://www.securityfocus.com/bid/48810 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68738 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/45355 Vendor Advisory
- http://securitytracker.com/id?1025810 securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml Vendor Advisory
- http://www.securityfocus.com/bid/48810 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68738 exchange.xforce.ibmcloud.com