CVEvulnerability
CVE-2011-3297
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-10-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-287
Description
Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.
Affected configurations
• cisco firewall services module software 3.1
• cisco firewall services module software 3.1\(2\)
• cisco firewall services module software 3.1\(3\)
• cisco firewall services module software 3.1\(4\)
• cisco firewall services module software 3.1\(5\)
• cisco firewall services module software 3.1\(6\)
• cisco firewall services module software 3.1\(7\)
• cisco firewall services module software 3.1\(8\)
• cisco firewall services module software 3.1\(9\)
• cisco firewall services module software 3.1\(10\)
• cisco firewall services module software 3.1\(11\)
• cisco firewall services module software 3.1\(12\)
• cisco firewall services module software 3.1\(13\)
• cisco firewall services module software 3.1\(14\)
• cisco firewall services module software 3.1\(15\)
• cisco firewall services module software 3.1\(16\)
• cisco firewall services module software 3.1\(17\)
• cisco firewall services module software 3.1\(18\)
• cisco firewall services module software 3.1\(19\)
• cisco firewall services module software 3.1\(20\)
• cisco firewall services module software 3.2
• cisco firewall services module software 3.2\(1\)
• cisco firewall services module software 3.2\(2\)
• cisco firewall services module software 3.2\(3\)
• cisco firewall services module software 3.2\(4\)
• cisco firewall services module software 3.2\(5\)
• cisco firewall services module software 3.2\(6\)
• cisco firewall services module software 3.2\(7\)
• cisco firewall services module software 3.2\(8\)
• cisco firewall services module software 3.2\(9\)
• cisco firewall services module software 3.2\(10\)
• cisco firewall services module software 3.2\(11\)
• cisco firewall services module software 3.2\(12\)
• cisco firewall services module software 3.2\(13\)
• cisco firewall services module software 3.2\(14\)
• cisco firewall services module software 3.2\(15\)
• cisco firewall services module software 3.2\(16\)
• cisco firewall services module software 3.2\(17\)
• cisco firewall services module software 3.2\(18\)
• cisco firewall services module software 3.2\(19\)
• cisco firewall services module software 3.2\(20\)
• cisco firewall services module software 3.2\(21\)
• cisco firewall services module software 4.0
• cisco firewall services module software 4.0\(1\)
• cisco firewall services module software 4.0\(2\)
• cisco firewall services module software 4.0\(3\)
• cisco firewall services module software 4.0\(4\)
• cisco firewall services module software 4.0\(5\)
• cisco firewall services module software 4.0\(6\)
• cisco firewall services module software 4.0\(7\)
• cisco firewall services module software 4.0\(8\)
• cisco firewall services module software 4.0\(10\)
• cisco firewall services module software 4.0\(11\)
• cisco firewall services module software 4.0\(12\)
• cisco firewall services module software 4.0\(13\)
• cisco firewall services module software 4.0\(14\)
• cisco firewall services module software 4.0\(15\)
• cisco firewall services module software 4.1
• cisco firewall services module software 4.1\(1\)
• cisco firewall services module software 4.1\(2\)
… and 6 more
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70327 exchange.xforce.ibmcloud.com
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70327 exchange.xforce.ibmcloud.com