PT-2011-3925 · Cisco · Cisco Sa 500 Series

Published 2011-07-28 · Updated 2017-08-29 · CVE-2011-2546

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco SA 500 series security appliances versions prior to 2.1.19

Description A SQL injection issue exists in the web-based management interface, allowing remote attackers to execute arbitrary SQL commands.

Recommendations For versions prior to 2.1.19, update to version 2.1.19 or later to resolve the issue.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2011-2546

Affected Products

Cisco Sa 500 Series

References · 6

• http://secunia.com/advisories/45355 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2546 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml · Vendor Advisory
• http://securityfocus.com/bid/48812 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/68737 · Note
• http://securitytracker.com/id?1025810 · Note