CVE-2011-0394: High severity cisco pix vulnerability
Published Feb 25, 2011
·Updated
Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 7.0 before 7.0(8.11), 7.1 and 7.2 before 7.2(5.1), 8.0 before 8.0(5.19), 8.1 before 8.1(2.47), 8.2 before 8.2(2.19), and 8.3 before 8.3(1.8); Cisco PIX Security Appliances 500 series devices; and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(20), 3.2 before 3.2(20), 4.0 before 4.0(15), and 4.1 before 4.1(5) allow remote attackers to cause a denial of service (device reload) via a malformed Skinny Client Control Protocol (SCCP) message, aka Bug IDs CSCtg69457 and CSCtl84952.
Affected Software
95 affected components
Cisco PIX 500
Cisco Adaptive Security Appliance=8.1\(1\)
Cisco Adaptive Security Appliance=8.1\(2\)
Cisco Adaptive Security Appliance Software<=8.3\(1\)
Cisco Adaptive Security Appliance Software=7.0
Cisco Adaptive Security Appliance Software=7.0\(0\)
Cisco Adaptive Security Appliance Software=7.0\(2\)
Cisco Adaptive Security Appliance Software=7.0\(4\)
Cisco Adaptive Security Appliance Software=7.0\(5\)
Cisco Adaptive Security Appliance Software=7.0\(5.2\)
Cisco Adaptive Security Appliance Software=7.0\(6.7\)
Cisco Adaptive Security Appliance Software=7.0.1
Cisco Adaptive Security Appliance Software=7.0.1.4
Cisco Adaptive Security Appliance Software=7.0.2
Cisco Adaptive Security Appliance Software=7.0.4
Cisco Adaptive Security Appliance Software=7.0.4.3
Cisco Adaptive Security Appliance Software=7.0.5
Cisco Adaptive Security Appliance Software=7.0.6
Cisco Adaptive Security Appliance Software=7.0.7
Cisco Adaptive Security Appliance Software=7.0.8
Cisco Adaptive Security Appliance Software=7.0.8-interim
Cisco Adaptive Security Appliance Software=7.1
Cisco Adaptive Security Appliance Software=7.1\(2\)
Cisco Adaptive Security Appliance Software=7.1\(2.5\)
Cisco Adaptive Security Appliance Software=7.1\(2.27\)
Cisco Adaptive Security Appliance Software=7.1\(2.48\)
Cisco Adaptive Security Appliance Software=7.1\(2.49\)
Cisco Adaptive Security Appliance Software=7.1\(5\)
Cisco Adaptive Security Appliance Software=7.1.1
Cisco Adaptive Security Appliance Software=7.1.2
Cisco Adaptive Security Appliance Software=7.2
Cisco Adaptive Security Appliance Software=7.2\(1\)
Cisco Adaptive Security Appliance Software=7.2\(1.22\)
Cisco Adaptive Security Appliance Software=7.2\(2\)
Cisco Adaptive Security Appliance Software=7.2\(2.5\)
Cisco Adaptive Security Appliance Software=7.2\(2.7\)
Cisco Adaptive Security Appliance Software=7.2\(2.8\)
Cisco Adaptive Security Appliance Software=7.2\(2.10\)
Cisco Adaptive Security Appliance Software=7.2\(2.14\)
Cisco Adaptive Security Appliance Software=7.2\(2.15\)
Cisco Adaptive Security Appliance Software=7.2\(2.16\)
Cisco Adaptive Security Appliance Software=7.2\(2.17\)
Cisco Adaptive Security Appliance Software=7.2\(2.18\)
Cisco Adaptive Security Appliance Software=7.2\(2.19\)
Cisco Adaptive Security Appliance Software=7.2\(2.48\)
Cisco Adaptive Security Appliance Software=7.2.1
Cisco Adaptive Security Appliance Software=7.2.2
Cisco Adaptive Security Appliance Software=7.2.3
Cisco Adaptive Security Appliance Software=7.2.4
Cisco Adaptive Security Appliance Software=7.2.5
Cisco Adaptive Security Appliance Software=8.0
Cisco Adaptive Security Appliance Software=8.0.2
Cisco Adaptive Security Appliance Software=8.0.3
Cisco Adaptive Security Appliance Software=8.0.4
Cisco Adaptive Security Appliance Software=8.0.5
Cisco Adaptive Security Appliance Software=8.2\(1\)
Cisco Adaptive Security Appliance Software=8.2\(2\)
Cisco Adaptive Security Appliance Software=8.2\(3\)
Cisco Adaptive Security Appliance Software=8.2\(3.9\)
Cisco Adaptive Security Appliance Software=8.2\(4\)
Cisco Adaptive Security Appliance Software=8.2.1
Cisco Adaptive Security Appliance Software=8.2.2
Cisco Adaptive Security Appliance Software=8.2.2-interim
Cisco 5500 Series Adaptive Security Appliance
Cisco ASA 5500
Cisco Firewall Services Module Software=3.1
Cisco Firewall Services Module Software=3.1\(5\)
Cisco Firewall Services Module Software=3.1\(6\)
Cisco Firewall Services Module Software=3.1\(16\)
Cisco Firewall Services Module Software=3.1\(17\)
Cisco Firewall Services Module Software=3.1\(18\)
Cisco Firewall Services Module Software=3.1\(19\)
Cisco Firewall Services Module Software=3.2
Cisco Firewall Services Module Software=3.2\(1\)
Cisco Firewall Services Module Software=3.2\(2\)
Cisco Firewall Services Module Software=3.2\(3\)
Cisco Firewall Services Module Software=3.2\(13\)
Cisco Firewall Services Module Software=3.2\(14\)
Cisco Firewall Services Module Software=3.2\(16\)
Cisco Firewall Services Module Software=4.0
Cisco Firewall Services Module Software=4.0\(4\)
Cisco Firewall Services Module Software=4.0\(6\)
Cisco Firewall Services Module Software=4.0\(7\)
Cisco Firewall Services Module Software=4.0\(8\)
Cisco Firewall Services Module Software=4.0\(10\)
Cisco Firewall Services Module Software=4.0\(11\)
Cisco Firewall Services Module Software=4.0\(12\)
Cisco Firewall Services Module Software=4.0\(13\)
Cisco Firewall Services Module Software=4.0\(14\)
Cisco Firewall Services Module Software=4.1
Cisco Firewall Services Module Software=4.1\(1\)
Cisco Firewall Services Module Software=4.1\(2\)
Cisco Firewall Services Module Software=4.1\(3\)
Cisco Firewall Services Module Software=4.1\(4\)
Cisco Firewall Services Module
Event History
Feb 25, 2011
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-0394?
CVE-2011-0394 is rated as high severity due to the potential for unauthorized access to sensitive information.
2
How do I fix CVE-2011-0394?
To fix CVE-2011-0394, update the affected Cisco Adaptive Security Appliances and PIX Security Appliances to the latest available software versions.
3
Which devices are affected by CVE-2011-0394?
CVE-2011-0394 affects Cisco Adaptive Security Appliances 5500 series and PIX Security Appliances 500 series devices running specific vulnerable software versions.
4
What types of attacks can exploit CVE-2011-0394?
CVE-2011-0394 can be exploited through unauthorized remote access, leading to potential information disclosure.
5
Is CVE-2011-0394 currently being actively exploited?
There is no current evidence suggesting that CVE-2011-0394 is being actively exploited in the wild, but organizations are advised to apply patches.