CVEvulnerability
CVE-2011-3298
7.9 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-10-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.9 HIGH — AV:A/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-287
Description
Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 before 7.0(8.13), 7.1 and 7.2 before 7.2(5.3), 8.0 before 8.0(5.24), 8.1 before 8.1(2.50), 8.2 before 8.2(5), 8.3 before 8.3(2.18), 8.4 before 8.4(1.10), and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7) allow remote attackers to bypass authentication via a crafted TACACS+ reply, aka Bug IDs CSCto40365 and CSCto74274.
Affected configurations
• cisco adaptive security appliance software 7.0
• cisco adaptive security appliance software 7.0\(0\)
• cisco adaptive security appliance software 7.0\(1\)
• cisco adaptive security appliance software 7.0\(2\)
• cisco adaptive security appliance software 7.0\(4\)
• cisco adaptive security appliance software 7.0\(5\)
• cisco adaptive security appliance software 7.0\(5.2\)
• cisco adaptive security appliance software 7.0\(6\)
• cisco adaptive security appliance software 7.0\(6.7\)
• cisco adaptive security appliance software 7.0\(7\)
• cisco adaptive security appliance software 7.0\(8\)
• cisco adaptive security appliance software 7.0.1
• cisco adaptive security appliance software 7.0.1.4
• cisco adaptive security appliance software 7.0.2
• cisco adaptive security appliance software 7.0.4
• cisco adaptive security appliance software 7.0.4.3
• cisco adaptive security appliance software 7.0.5
• cisco adaptive security appliance software 7.0.6
• cisco adaptive security appliance software 7.0.7
• cisco adaptive security appliance software 7.0.8
• cisco adaptive security appliance software 7.1
• cisco adaptive security appliance software 7.2
• cisco adaptive security appliance software 7.2\(1\)
• cisco adaptive security appliance software 7.2\(1.22\)
• cisco adaptive security appliance software 7.2\(2\)
• cisco adaptive security appliance software 7.2\(2.5\)
• cisco adaptive security appliance software 7.2\(2.7\)
• cisco adaptive security appliance software 7.2\(2.8\)
• cisco adaptive security appliance software 7.2\(2.10\)
• cisco adaptive security appliance software 7.2\(2.14\)
• cisco adaptive security appliance software 7.2\(2.15\)
• cisco adaptive security appliance software 7.2\(2.16\)
• cisco adaptive security appliance software 7.2\(2.17\)
• cisco adaptive security appliance software 7.2\(2.18\)
• cisco adaptive security appliance software 7.2\(2.19\)
• cisco adaptive security appliance software 7.2\(2.48\)
• cisco adaptive security appliance software 7.2\(3\)
• cisco adaptive security appliance software 7.2\(4\)
• cisco adaptive security appliance software 7.2\(5\)
• cisco adaptive security appliance software 7.2.1
• cisco adaptive security appliance software 7.2.2
• cisco adaptive security appliance software 7.2.3
• cisco adaptive security appliance software 7.2.4
• cisco adaptive security appliance software 7.2.5
• cisco adaptive security appliance software 8.0
• cisco adaptive security appliance software 8.0\(2\)
• cisco adaptive security appliance software 8.0\(3\)
• cisco adaptive security appliance software 8.0\(4\)
• cisco adaptive security appliance software 8.0\(5\)
• cisco adaptive security appliance software 8.0.2
• cisco adaptive security appliance software 8.0.3
• cisco adaptive security appliance software 8.0.4
• cisco adaptive security appliance software 8.0.5
• cisco adaptive security appliance software 8.1
• cisco adaptive security appliance software 8.2\(1\)
• cisco adaptive security appliance software 8.2\(2\)
• cisco adaptive security appliance software 8.2\(3\)
• cisco adaptive security appliance software 8.2\(3.9\)
• cisco adaptive security appliance software 8.2\(4\)
• cisco adaptive security appliance software 8.2\(4.1\)
… and 79 more
Related
Weakness · CWE (1)
- CWE-287 Improper Authentication weakness
References
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70328 exchange.xforce.ibmcloud.com
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-asa.shtml Vendor Advisory
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70328 exchange.xforce.ibmcloud.com