Vulnerability Description
Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 12.4\(11\)md |
| Cisco | Content Services Gateway Second Generation | All versions |
Related Weaknesses (CWE)
References
- http://osvdb.org/70720
- http://secunia.com/advisories/43052Vendor Advisory
- http://securitytracker.com/id?1024992
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.sVendor Advisory
- http://www.securityfocus.com/bid/46022
- http://www.vupen.com/english/advisories/2011/0229
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64936
- http://osvdb.org/70720
- http://secunia.com/advisories/43052Vendor Advisory
- http://securitytracker.com/id?1024992
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.sVendor Advisory
- http://www.securityfocus.com/bid/46022
- http://www.vupen.com/english/advisories/2011/0229
- https://exchange.xforce.ibmcloud.com/vulnerabilities/64936
FAQ
What is CVE-2011-0348?
CVE-2011-0348 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generatio...
How severe is CVE-2011-0348?
CVE-2011-0348 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0348?
Check the references section above for vendor advisories and patch information. Affected products include: Cisco Ios, Cisco Content Services Gateway Second Generation.