CVE-2011-3305
high · 7.8Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.
7.8
CVSS
21.6%
EPSS (exploit prob.)
98th
EPSS percentile
2011-10-06
Published
AV:N/AC:L/Au:N/C:C/I:N/A:N
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| cisco | nac_manager | 4.8 |
| cisco | nac_manager | 4.8(1) |
| cisco | nac_manager | 4.8(2) |
| cisco | nac_appliance | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://osvdb.org/76080
- http://secunia.com/advisories/46309
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml
- http://www.securityfocus.com/bid/49954
- http://www.securitytracker.com/id?1026142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70335
- http://osvdb.org/76080
- http://secunia.com/advisories/46309
- http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml
- http://www.securityfocus.com/bid/49954
- http://www.securitytracker.com/id?1026142
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70335
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2011-3305