cbcvebase.
CVE-2011-1655
published 2011-04-18

CVE-2011-1655: The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext…

PriorityP353high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
11.97%
95.6th percentile
The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service.

Affected

1 ranges
VendorProductVersion rangeFixed in
broadcomtotal_defense——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.