Cisco Security Advisories · October 2011 — Cisco Security Advisories
10 advisories 19 CVEs 2 EXPLOITED

PSIRT bulletins (cisco-sa-*) and cross-source CVEs naming Cisco for 2011-10. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 2 are already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

cisco-sa-20111026-cucm

Cisco PSIRTExploitedVulnCheck KEV listed2011-10-26

Cisco Unified Communications Manager Directory Traversal Vulnerability

CVEs:CVE-2011-3315

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-43 affected Cisco — —
CVRFPID-88444 affected Cisco — —
CVRFPID-92631 affected Cisco — —
Upstream advisory

cisco-sa-20111026-uccx

Cisco PSIRTExploitedVulnCheck KEV listed2011-10-26

Cisco Unified Contact Center Express Directory Traversal Vulnerability

CVEs:CVE-2011-3315

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-43 affected Cisco — —
CVRFPID-88444 affected Cisco — —
CVRFPID-92631 affected Cisco — —
Upstream advisory

cisco-sa-20111005-nac

Cisco PSIRTActive exploitation (sightings)2011-10-05

Directory Traversal Vulnerability in Cisco Network Admission Control Manager

CVEs:CVE-2011-3305

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-6407 affected Cisco — —
Upstream advisory

cisco-sa-20111005-fwsm

Cisco PSIRTPoC exploit2011-10-05

Multiple Vulnerabilities in Cisco Firewall Services Module

CVEs:CVE-2011-3296CVE-2011-3297CVE-2011-3298CVE-2011-3299CVE-2011-3300CVE-2011-3301CVE-2011-3302CVE-2011-3303

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100027 affected Cisco — —
CVRFPID-108069 affected Cisco — —
CVRFPID-108072 affected Cisco — —
CVRFPID-108073 affected Cisco — —
CVRFPID-108074 affected Cisco — —
CVRFPID-111872 affected Cisco — —
CVRFPID-112136 affected Cisco — —
CVRFPID-112139 affected Cisco — —
CVRFPID-5176 affected Cisco — —
CVRFPID-70760 affected Cisco — —
CVRFPID-70761 affected Cisco — —
CVRFPID-70762 affected Cisco — —
CVRFPID-70763 affected Cisco — —
CVRFPID-70764 affected Cisco — —
CVRFPID-91003 affected Cisco — —
CVRFPID-91004 affected Cisco — —
CVRFPID-91005 affected Cisco — —
CVRFPID-91006 affected Cisco — —
CVRFPID-91009 affected Cisco — —
CVRFPID-91010 affected Cisco — —
CVRFPID-91011 affected Cisco — —
CVRFPID-91012 affected Cisco — —
CVRFPID-91013 affected Cisco — —
CVRFPID-91019 affected Cisco — —
CVRFPID-91020 affected Cisco — —
CVRFPID-91021 affected Cisco — —
CVRFPID-91022 affected Cisco — —
CVRFPID-91088 affected Cisco — —
CVRFPID-91089 affected Cisco — —
CVRFPID-91090 affected Cisco — —
CVRFPID-92319 affected Cisco — —
CVRFPID-92320 affected Cisco — —
CVRFPID-92321 affected Cisco — —
CVRFPID-92322 affected Cisco — —
CVRFPID-97260 affected Cisco — —
CVRFPID-97261 affected Cisco — —
CVRFPID-97262 affected Cisco — —
CVRFPID-99994 affected Cisco — —
CVRFPID-99996 affected Cisco — —
CVRFPID-99997 affected Cisco — —
Upstream advisory

cisco-sa-20111019-cs

Cisco PSIRTEPSS <= 49%2011-10-19

CiscoWorks Common Services Arbitrary Command Execution Vulnerability

CVEs:CVE-2011-3310

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-43 affected Cisco — —
CVRFPID-5346 affected Cisco — —
CVRFPID-7743 affected Cisco — —
CVRFPID-79762 affected Cisco — —
CVRFPID-79770 affected Cisco — —
CVRFPID-79783 affected Cisco — —
CVRFPID-8038 affected Cisco — —
CVRFPID-91847 affected Cisco — —
Upstream advisory

cisco-sa-20111005-asa

Cisco PSIRTEPSS <= 49%2011-10-05

Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances and Cisco Catalyst 6500 Series ASA Services Module

CVEs:CVE-2011-3304CVE-2011-3298CVE-2011-3299CVE-2011-3300CVE-2011-3301CVE-2011-3302CVE-2011-3303

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-100027 affected Cisco — —
CVRFPID-108069 affected Cisco — —
CVRFPID-108072 affected Cisco — —
CVRFPID-108073 affected Cisco — —
CVRFPID-108074 affected Cisco — —
CVRFPID-111872 affected Cisco — —
CVRFPID-112136 affected Cisco — —
CVRFPID-70760 affected Cisco — —
CVRFPID-70761 affected Cisco — —
CVRFPID-70762 affected Cisco — —
CVRFPID-70763 affected Cisco — —
CVRFPID-70764 affected Cisco — —
CVRFPID-91003 affected Cisco — —
CVRFPID-91004 affected Cisco — —
CVRFPID-91005 affected Cisco — —
CVRFPID-91006 affected Cisco — —
CVRFPID-91009 affected Cisco — —
CVRFPID-91010 affected Cisco — —
CVRFPID-91011 affected Cisco — —
CVRFPID-91012 affected Cisco — —
CVRFPID-91013 affected Cisco — —
CVRFPID-91019 affected Cisco — —
CVRFPID-91020 affected Cisco — —
CVRFPID-91021 affected Cisco — —
CVRFPID-91022 affected Cisco — —
CVRFPID-91088 affected Cisco — —
CVRFPID-91089 affected Cisco — —
CVRFPID-91090 affected Cisco — —
CVRFPID-92319 affected Cisco — —
CVRFPID-92320 affected Cisco — —
CVRFPID-92321 affected Cisco — —
CVRFPID-92322 affected Cisco — —
CVRFPID-97260 affected Cisco — —
CVRFPID-97261 affected Cisco — —
CVRFPID-97262 affected Cisco — —
CVRFPID-99994 affected Cisco — —
CVRFPID-99996 affected Cisco — —
CVRFPID-99997 affected Cisco — —
Upstream advisory

cisco-sa-20111026-camera

Cisco PSIRTEPSS <= 49%2011-10-26

Denial of Service Vulnerability in Cisco Video Surveillance IP Cameras

CVEs:CVE-2011-3318

Affected products

ProductStatusVendorPackageEcosystem
CVRFPID-112511 affected Cisco — —
CVRFPID-112545 affected Cisco — —
CVRFPID-43 affected Cisco — —
CVRFPID-92402 affected Cisco — —
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.