CVE-2011-3289

Published: May 2, 2012Modified: Apr 29, 2026

3.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 3.9 / Impact: 4.9

Source: NVD

Description

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640.

Affected (4)

Products: Cisco: Ios

Cisco

1 product

Ios

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Cisco Ios	Version 12.4
Cisco Ios	Version 15.0
Cisco Ios	Version 15.1
Cisco Ios	Version 15.2

Related CWEs

CWE-264

References (4)

http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html

Source: psirt@cisco.com

http://www.securitytracker.com/id?1027005

Source: psirt@cisco.com

http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securitytracker.com/id?1027005

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.