CVE-2011-3309

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html
http://www.securitytracker.com/id?1027008
http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html
http://www.securitytracker.com/id?1027008

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim::::::
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:interim::::::
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2\):::::::*
	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::*

cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*

History

21 Nov 2024, 01:30

Type	Values Removed	Values Added
References	~~() http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html -~~	() http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html -
References	~~() http://www.securitytracker.com/id?1027008 -~~	() http://www.securitytracker.com/id?1027008 -

15 Aug 2023, 14:28

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.4\(1\):::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(2.11\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.4\(1.11\):::::::*

11 Aug 2023, 19:03

Type	Values Removed	Values Added
CPE	cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3.2:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3.1:interim:::::: cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.2:interim:::::: cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(2\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(5\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.3\(1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(3\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(4\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.2:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.3:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2.1:::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(1\):::::::* cpe:2.3:a:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::*	cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.4\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:interim:::::: cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(5\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.1:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4.1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3.9\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(2\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3\(1\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.2:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2.3:::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.3.1:interim:::::: cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(3\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(4\):::::::* cpe:2.3:o:cisco:adaptive_security_appliance_software:8.2\(2\):::::::*

Information

Published : 2012-05-02 10:09

Updated : 2024-11-21 01:30

NVD link : CVE-2011-3309

Mitre link : CVE-2011-3309

CVE.ORG link : CVE-2011-3309

JSON object : View

Products Affected

cisco

adaptive_security_appliance_software
5500_series_adaptive_security_appliance

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

4.3 /10