CVE-2011-2054: Cisco ASA Secondary Authentication Bypass Vulnerability
First published: Wed Feb 19 2020(Updated: )
A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco Asa 5500 Firmware | =8.4\(1\) | |
| Cisco ASA 5500 | ||
| Cisco Asa 5510 Firmware | =8.4\(1\) | |
| Cisco Asa 5510 | ||
| Cisco Asa 5512-x Firmware | =8.4\(1\) | |
| Cisco Asa 5512-x | ||
| Cisco Asa 5515-x Firmware | =8.4\(1\) | |
| Cisco Asa 5515-x | ||
| Cisco Asa 5520 Firmware | =8.4\(1\) | |
| Cisco Asa 5520 | ||
| Cisco Asa 5525-x Firmware | =8.4\(1\) | |
| Cisco Asa 5525-x | ||
| Cisco Asa 5540 Firmware | =8.4\(1\) | |
| Cisco Asa 5540 | ||
| Cisco Asa 5545-x Firmware | =8.4\(1\) | |
| Cisco Asa 5545-x | ||
| Cisco Asa 5550 Firmware | =8.4\(1\) | |
| Cisco Asa 5550 | ||
| Cisco Asa 5555-x Firmware | =8.4\(1\) | |
| Cisco Asa 5555-x | ||
| Cisco Asa 5580 Firmware | =8.4\(1\) | |
| Cisco Asa 5580 | ||
| Cisco Asa 5585-x Firmware | =8.4\(1\) | |
| Cisco Asa 5585-x |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2011-2054?
CVE-2011-2054 is a vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct.
How can a remote attacker exploit CVE-2011-2054?
A remote attacker can exploit CVE-2011-2054 by attempting to authenticate using the Cisco AnyConnect VPN client with a blank password, while the Secondary Authentication type is LDAP and the primary credentials are correct.
What is the severity of CVE-2011-2054?
CVE-2011-2054 has a severity rating of high.
How can I protect myself from CVE-2011-2054?
To protect yourself from CVE-2011-2054, ensure that the Secondary Authentication type is not set to LDAP or use a strong password for the Cisco AnyConnect VPN client.
Where can I find more information about CVE-2011-2054?
You can find more information about CVE-2011-2054 at the following link: [https://quickview.cloudapps.cisco.com/quickview/bug/CSCtq58884]
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/severity
- agent/title
- agent/weakness
- agent/author
- agent/tags
- agent/event
- agent/first-publish-date
- agent/description
- vendor/cisco
- canonical/cisco asa 5500 firmware
- version/cisco asa 5500 firmware/8.4\(1\)
- canonical/cisco asa 5500
- canonical/cisco asa 5510 firmware
- version/cisco asa 5510 firmware/8.4\(1\)
- canonical/cisco asa 5510
- canonical/cisco asa 5512-x firmware
- version/cisco asa 5512-x firmware/8.4\(1\)
- canonical/cisco asa 5512-x
- canonical/cisco asa 5515-x firmware
- version/cisco asa 5515-x firmware/8.4\(1\)
- canonical/cisco asa 5515-x
- canonical/cisco asa 5520 firmware
- version/cisco asa 5520 firmware/8.4\(1\)
- canonical/cisco asa 5520
- canonical/cisco asa 5525-x firmware
- version/cisco asa 5525-x firmware/8.4\(1\)
- canonical/cisco asa 5525-x
- canonical/cisco asa 5540 firmware
- version/cisco asa 5540 firmware/8.4\(1\)
- canonical/cisco asa 5540
- canonical/cisco asa 5545-x firmware
- version/cisco asa 5545-x firmware/8.4\(1\)
- canonical/cisco asa 5545-x
- canonical/cisco asa 5550 firmware
- version/cisco asa 5550 firmware/8.4\(1\)
- canonical/cisco asa 5550
- canonical/cisco asa 5555-x firmware
- version/cisco asa 5555-x firmware/8.4\(1\)
- canonical/cisco asa 5555-x
- canonical/cisco asa 5580 firmware
- version/cisco asa 5580 firmware/8.4\(1\)
- canonical/cisco asa 5580
- canonical/cisco asa 5585-x firmware
- version/cisco asa 5585-x firmware/8.4\(1\)
- canonical/cisco asa 5585-x