CVE-2011-0348

critical

Description

Cisco IOS 12.4(11)MD, 12.4(15)MD, 12.4(22)MD, 12.4(24)MD before 12.4(24)MD3, 12.4(22)MDA before 12.4(22)MDA5, and 12.4(24)MDA before 12.4(24)MDA3 on the Cisco Content Services Gateway Second Generation (aka CSG2) allows remote attackers to bypass intended access restrictions and intended billing restrictions by sending HTTP traffic to a restricted destination after sending HTTP traffic to an unrestricted destination, aka Bug ID CSCtk35917.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/64936

http://www.vupen.com/english/advisories/2011/0229

http://www.securityfocus.com/bid/46022

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6791d.shtml

http://securitytracker.com/id?1024992

http://secunia.com/advisories/43052

http://osvdb.org/70720

Details

Source: Mitre, NVD

Published: 2011-01-28

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00203