CVE-2011-3305

high

Description

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/70335

http://www.securitytracker.com/id?1026142

http://www.securityfocus.com/bid/49954

http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml

http://secunia.com/advisories/46309

http://osvdb.org/76080

Details

Source: Mitre, NVD

Published: 2011-10-06

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N