← Back

CVE-2011-0348

nvd nist
Published: Jan 28, 2011Modified: Apr 29, 2026

JSON object

Loading...
6.4
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:N
Exploitability: 10.0 / Impact: 4.9
Source: NVD

Description

Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.

Affected (7)

Products: Cisco: Ios
Cisco
1 product
Ios
Configuration A
7 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Cisco
Ios
Version 12.4(11)md
Ios
Version 12.4(15)md
Ios
Version 12.4(22)md
Ios
Version 12.4(22)mda
Ios
Version 12.4(24)md1
Ios
Version 12.4(24)md
Ios
Version 12.4(24)mda
Running on/withPlatform Versions
Cisco
Content Services Gateway Second Generation
All versions

Related CWEs

CWE-264
CWE-264

References (14)

Source: psirt@cisco.com
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Source: psirt@cisco.com
Vendor Advisory
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: psirt@cisco.com
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.