Cisco Security Advisories · October 2011 — Cisco Security Advisories
10 advisories 19 CVEs 2 EXPLOITED

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2011-10. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20111026-cucm

Cisco PSIRTExploitedVulnCheck KEV listed2011-10-26

Cisco Unified Communications Manager Directory Traversal Vulnerability

CVEs:CVE-2011-3315

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-43 affected Cisco
CVRFPID-88444 affected Cisco
CVRFPID-92631 affected Cisco
Upstream advisory

cisco-sa-20111026-uccx

Cisco PSIRTExploitedVulnCheck KEV listed2011-10-26

Cisco Unified Contact Center Express Directory Traversal Vulnerability

CVEs:CVE-2011-3315

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-43 affected Cisco
CVRFPID-88444 affected Cisco
CVRFPID-92631 affected Cisco
Upstream advisory

cisco-sa-20111005-nac

Cisco PSIRTActive exploitation (sightings)2011-10-05

Directory Traversal Vulnerability in Cisco Network Admission Control Manager

CVEs:CVE-2011-3305

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-6407 affected Cisco
Upstream advisory

cisco-sa-20111005-fwsm

Cisco PSIRTPoC exploit2011-10-05

Multiple Vulnerabilities in Cisco Firewall Services Module

CVEs:CVE-2011-3296CVE-2011-3297CVE-2011-3298CVE-2011-3299CVE-2011-3300CVE-2011-3301CVE-2011-3302CVE-2011-3303

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100027 affected Cisco
CVRFPID-108069 affected Cisco
CVRFPID-108072 affected Cisco
CVRFPID-108073 affected Cisco
CVRFPID-108074 affected Cisco
CVRFPID-111872 affected Cisco
CVRFPID-112136 affected Cisco
CVRFPID-112139 affected Cisco
CVRFPID-5176 affected Cisco
CVRFPID-70760 affected Cisco
CVRFPID-70761 affected Cisco
CVRFPID-70762 affected Cisco
CVRFPID-70763 affected Cisco
CVRFPID-70764 affected Cisco
CVRFPID-91003 affected Cisco
CVRFPID-91004 affected Cisco
CVRFPID-91005 affected Cisco
CVRFPID-91006 affected Cisco
CVRFPID-91009 affected Cisco
CVRFPID-91010 affected Cisco
CVRFPID-91011 affected Cisco
CVRFPID-91012 affected Cisco
CVRFPID-91013 affected Cisco
CVRFPID-91019 affected Cisco
CVRFPID-91020 affected Cisco
CVRFPID-91021 affected Cisco
CVRFPID-91022 affected Cisco
CVRFPID-91088 affected Cisco
CVRFPID-91089 affected Cisco
CVRFPID-91090 affected Cisco
CVRFPID-92319 affected Cisco
CVRFPID-92320 affected Cisco
CVRFPID-92321 affected Cisco
CVRFPID-92322 affected Cisco
CVRFPID-97260 affected Cisco
CVRFPID-97261 affected Cisco
CVRFPID-97262 affected Cisco
CVRFPID-99994 affected Cisco
CVRFPID-99996 affected Cisco
CVRFPID-99997 affected Cisco
Upstream advisory

cisco-sa-20111019-cs

Cisco PSIRTEPSS <= 49%2011-10-19

CiscoWorks Common Services Arbitrary Command Execution Vulnerability

CVEs:CVE-2011-3310

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-43 affected Cisco
CVRFPID-5346 affected Cisco
CVRFPID-7743 affected Cisco
CVRFPID-79762 affected Cisco
CVRFPID-79770 affected Cisco
CVRFPID-79783 affected Cisco
CVRFPID-8038 affected Cisco
CVRFPID-91847 affected Cisco
Upstream advisory

cisco-sa-20111005-asa

Cisco PSIRTEPSS <= 49%2011-10-05

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

CVEs:CVE-2011-3304CVE-2011-3298CVE-2011-3299CVE-2011-3300CVE-2011-3301CVE-2011-3302CVE-2011-3303

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100027 affected Cisco
CVRFPID-108069 affected Cisco
CVRFPID-108072 affected Cisco
CVRFPID-108073 affected Cisco
CVRFPID-108074 affected Cisco
CVRFPID-111872 affected Cisco
CVRFPID-112136 affected Cisco
CVRFPID-70760 affected Cisco
CVRFPID-70761 affected Cisco
CVRFPID-70762 affected Cisco
CVRFPID-70763 affected Cisco
CVRFPID-70764 affected Cisco
CVRFPID-91003 affected Cisco
CVRFPID-91004 affected Cisco
CVRFPID-91005 affected Cisco
CVRFPID-91006 affected Cisco
CVRFPID-91009 affected Cisco
CVRFPID-91010 affected Cisco
CVRFPID-91011 affected Cisco
CVRFPID-91012 affected Cisco
CVRFPID-91013 affected Cisco
CVRFPID-91019 affected Cisco
CVRFPID-91020 affected Cisco
CVRFPID-91021 affected Cisco
CVRFPID-91022 affected Cisco
CVRFPID-91088 affected Cisco
CVRFPID-91089 affected Cisco
CVRFPID-91090 affected Cisco
CVRFPID-92319 affected Cisco
CVRFPID-92320 affected Cisco
CVRFPID-92321 affected Cisco
CVRFPID-92322 affected Cisco
CVRFPID-97260 affected Cisco
CVRFPID-97261 affected Cisco
CVRFPID-97262 affected Cisco
CVRFPID-99994 affected Cisco
CVRFPID-99996 affected Cisco
CVRFPID-99997 affected Cisco
Upstream advisory

cisco-sa-20111026-camera

Cisco PSIRTEPSS <= 49%2011-10-26

Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras

CVEs:CVE-2011-3318

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112511 affected Cisco
CVRFPID-112545 affected Cisco
CVRFPID-43 affected Cisco
CVRFPID-92402 affected Cisco
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.