CVE-2011-0348
First published: Fri Jan 28 2011(Updated: )
Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco IOS | =12.4\(11\)md | |
| Cisco IOS | =12.4\(15\)md | |
| Cisco IOS | =12.4\(22\)md | |
| Cisco IOS | =12.4\(22\)mda | |
| Cisco IOS | =12.4\(24\)md | |
| Cisco IOS | =12.4\(24\)md1 | |
| Cisco IOS | =12.4\(24\)mda | |
| Cisco Content Services Gateway Second Generation |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/43052
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml
- http://www.securityfocus.com/bid/46022
- http://securitytracker.com/id?1024992
- http://www.vupen.com/english/advisories/2011/0229
- http://osvdb.org/70720
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64936
Frequently Asked Questions
What is the severity of CVE-2011-0348?
CVE-2011-0348 has a moderate severity rating due to its potential for unauthorized access and billing exploitation.
How do I fix CVE-2011-0348?
To fix CVE-2011-0348, upgrade to Cisco IOS versions 12.4(24)MD3, 12.4(22)MDA5, or 12.4(24)MDA3 or later.
What are the affected systems for CVE-2011-0348?
CVE-2011-0348 affects Cisco IOS versions 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(22)MDA, and 12.4(24)MD before their respective patches.
What type of vulnerability is CVE-2011-0348?
CVE-2011-0348 is a vulnerability that allows remote attackers to bypass access restrictions.
Who is impacted by CVE-2011-0348?
Organizations using vulnerable Cisco IOS versions on their Content Services Gateway Second Generation devices are at risk from CVE-2011-0348.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/tags
- agent/description
- agent/source
- vendor/cisco
- canonical/cisco ios
- version/cisco ios/12.4\(11\)md
- version/cisco ios/12.4\(15\)md
- version/cisco ios/12.4\(22\)md
- version/cisco ios/12.4\(22\)mda
- version/cisco ios/12.4\(24\)md
- version/cisco ios/12.4\(24\)md1
- version/cisco ios/12.4\(24\)mda
- canonical/cisco content services gateway second generation