CVE-2011-0951

medium Cisco
CVSS v3 Base Score
5.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS Score
68.0%
Exploitation probability in 30 days
Top 1% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
None
Integrity
P
Availability
None
Published: April 4, 2011 (5518 days ago)
Last Modified: April 29, 2026
Vendor: Cisco
Source: NVD

Description

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

CWE

CWE-255

Affected Products

cisco secure access control system

References

🔗 secunia.com 🔗 securitytracker.com 🔗 www.cisco.com 🔗 www.securityfocus.com 🔗 www.vupen.com