CVE-2011-2042

CWE-200 — Information Exposure3 documents3 sources
Severity
5.0MEDIUM
EPSS
0.3%
top 51.65%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Ciscoworks Common Services
Timeline
PublishedOct 22
Latest updateMay 17

Description

The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3.x and 4.x before 4.1 allows remote attackers to obtain potentially sensitive information about the engine name and database port via an unspecified request to UDP port 2638, aka Bug ID CSCsk35018.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-853p-pw8h-rw48: The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3↗2022-05-17
▶
CVEList
CVE-2011-2042: The Sybase SQL Anywhere database component in Cisco CiscoWorks Common Services 3↗2011-10-22
▶