PT-2011-2770 · Cisco · Cisco Ios

Published 2011-04-14 · Updated 2011-04-21 · CVE-2011-0935

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1

Description The issue concerns the PKI functionality, which fails to prevent permanent caching of certain public keys. This allows remote attackers to bypass authentication and potentially have other impacts by leveraging an IKE peer relationship where a key was previously valid but later revoked.

Recommendations For Cisco IOS versions 15.0 through 15.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2011-0935

Affected Products

Cisco Ios

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-0935 · Security Note
• http://cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html · Note
• http://cisco.com/en/US/docs/ios/15_1s/release/notes/15_1s_caveats_15_1_1s.html · Note
• http://securityfocus.com/bid/47407 · Note