CVE-2011-3310

CWE-94 — Code Injection4 documents4 sources
Severity
9.0CRITICAL
EPSS
27.3%
top 3.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Cisco Ciscoworks Common Services
Timeline
PublishedOct 20
Latest updateMay 17

Description

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-qr2h-w42m-wrfm: The Home Page component in Cisco CiscoWorks Common Services before 4↗2022-05-17
▶
CVEList
CVE-2011-3310: The Home Page component in Cisco CiscoWorks Common Services before 4↗2011-10-20
▶

📋Vendor Advisories

1
Cisco
CiscoWorks Common Services Arbitrary Command Execution Vulnerability↗2011-10-19
▶