CVE-2011-2546: SQL Injection
SQL injection vulnerability in the web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka Bug ID CSCtq65669.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2546?
CVE-2011-2546 is classified as a critical vulnerability, allowing remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2011-2546?
To fix CVE-2011-2546, upgrade to the Cisco SA 500 series software version 2.1.19 or later.
Which Cisco devices are affected by CVE-2011-2546?
CVE-2011-2546 affects Cisco SA 500 series security appliances running software before version 2.1.19.
What type of attack does CVE-2011-2546 enable?
CVE-2011-2546 enables remote SQL injection attacks that could compromise the integrity of the database.
Is user authentication required to exploit CVE-2011-2546?
No, user authentication is not required to exploit CVE-2011-2546, making it particularly dangerous.