Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2011-2054

A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability.

Published

2020-02-19T03:15:10.277

Last Modified

2024-11-21T01:27:30.853

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: SINGLE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

6.8

Impact Score

6.4

Weaknesses
  • Type: Secondary
    CWE-287
  • Type: Primary
    CWE-287
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Operating System cisco asa_5500_firmware 8.4\(1\) Yes
Hardware cisco asa_5500 - No
Operating System cisco asa_5510_firmware 8.4\(1\) Yes
Hardware cisco asa_5510 - No
Operating System cisco asa_5512-x_firmware 8.4\(1\) Yes
Hardware cisco asa_5512-x - No
Operating System cisco asa_5515-x_firmware 8.4\(1\) Yes
Hardware cisco asa_5515-x - No
Operating System cisco asa_5520_firmware 8.4\(1\) Yes
Hardware cisco asa_5520 - No
Operating System cisco asa_5525-x_firmware 8.4\(1\) Yes
Hardware cisco asa_5525-x - No
Operating System cisco asa_5540_firmware 8.4\(1\) Yes
Hardware cisco asa_5540 - No
Operating System cisco asa_5545-x_firmware 8.4\(1\) Yes
Hardware cisco asa_5545-x - No
Operating System cisco asa_5550_firmware 8.4\(1\) Yes
Hardware cisco asa_5550 - No
Operating System cisco asa_5555-x_firmware 8.4\(1\) Yes
Hardware cisco asa_5555-x - No
Operating System cisco asa_5580_firmware 8.4\(1\) Yes
Hardware cisco asa_5580 - No
Operating System cisco asa_5585-x_firmware 8.4\(1\) Yes
Hardware cisco asa_5585-x - No
References