Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2011-0364
HistoryFeb 19, 2011 - 1:00 a.m.

CVE-2011-0364

2011-02-1901:00:02
CWE-94
[email protected]
web.nvd.nist.gov
27
cve-2011-0364
cisco
security agent
management console
arbitrary code execution
remote attack

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.638 Medium

EPSS

Percentile

97.9%

JSON

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

Affected configurations

NVD
Node
ciscosecurity_agentMatch5.1
OR
ciscosecurity_agentMatch5.2
OR
ciscosecurity_agentMatch6.0

Related

saint 4
attackerkb 1
cvelist 1
nvd 1
prion 1
securityvulns 2
zdt 1
zdi 1
nessus 1
packetstorm 1
exploitpack 1
checkpoint_advisories 1
cisco 1
seebug 1
exploitdb 1
saint
saint
Cisco Security Agent Management Center Code Execution
2011-03-17 00:00:00
Cisco Security Agent Management Center Code Execution
2011-03-17 00:00:00
Cisco Security Agent Management Center Code Execution
2011-03-17 00:00:00
attackerkb
attackerkb
Cisco Security Agent Management Console st_upload File Creation
2011-02-19 00:00:00
cvelist
cvelist
CVE-2011-0364
2011-02-18 23:00:00
nvd
nvd
CVE-2011-0364
2011-02-19 01:00:02
prion
prion
Cross site request forgery (csrf)
2011-02-19 01:00:00
securityvulns
securityvulns
ZDI-11-088: Cisco Security Agent Management st_upload Remote Code Execution Vulnerability
2011-02-22 00:00:00
Cisco Security Advisory: Management Center for Cisco Security Agent Remote Code Execution Vulnerability
2011-02-22 00:00:00
zdt
zdt
Cisco Security Agent Management Console Γ’β‚¬Λœst_uploadÒ€ℒ RCE Exploit
2011-04-13 00:00:00
zdi
zdi
Cisco Security Agent Management st_upload Remote Code Execution Vulnerability
2011-02-16 00:00:00
nessus
nessus
Management Center for Cisco Security Agents Remote Code Execution (cisco-sa-20110216-csa)
2013-09-18 00:00:00
packetstorm
packetstorm
Cisco Security Agent Management Console Command Execution
2011-04-12 00:00:00
exploitpack
exploitpack
Cisco Security Agent Management Console - st_upload Remote Code Execution
2011-04-12 00:00:00
checkpoint_advisories
checkpoint_advisories
Cisco Security Agent Management Center Code Execution (CVE-2011-0364)
2011-04-03 00:00:00
cisco
cisco
Management Center for Cisco Security Agent Remote Code Execution Vulnerability
2011-02-16 16:00:00
seebug
seebug
Cisco Security Agent Management Console β€˜st_upload’ RCE Exploit
2011-04-13 00:00:00
exploitdb
exploitdb
Cisco Security Agent Management Console - 'st_upload' Remote Code Execution
2011-04-12 00:00:00

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.638 Medium

EPSS

Percentile

97.9%

JSON
Related for CVE-2011-0364
saint4attackerkb1cvelist1nvd1prion1securityvulns2zdt1zdi1nessus1packetstorm1exploitpack1checkpoint_advisories1cisco1seebug1exploitdb1