CVE-2011-3297

CWE-287 — Improper AuthenticationCWE-3994 documents4 sources
Severity
7.8HIGH
EPSS
1.0%
top 22.85%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Firewall Services Module Software
Timeline
PublishedOct 6
Latest updateMay 17

Description

Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-q23r-7gwj-52ch: Cisco Firewall Services Module (aka FWSM) 3↗2022-05-17
▶
CVEList
CVE-2011-3297: Cisco Firewall Services Module (aka FWSM) 3↗2011-10-06
▶

📋Vendor Advisories

1
Cisco
Multiple Vulnerabilities in Cisco Firewall Services Module↗2011-10-05
▶