What’s Vulnerable › Vulnerabilities

CVE-2011-0396

• Severity: high (CVSS 7.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-02-25 · updated 2026-06-16
• Weakness: CWE-264

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.

Affected products

• Cisco Adaptive Security Appliance: 8.0(2), 8.0(3), 8.0(4), 8.0(5), 8.1(1), 8.1(2) (+4)
• Cisco ASA Software: 8.0, 8.3(1)
• Cisco Asa 5500: all versions
• Cisco Asa 5505: all versions
• Cisco Asa 5510: all versions
• Cisco Asa 5520: all versions
• Cisco Asa 5540: all versions
• Cisco Asa 5550: all versions
• Cisco Asa 5580: all versions
• Cisco Pix 500: all versions
• Cisco Pix 501: all versions
• Cisco Pix 506E: all versions
• Cisco Pix Firewall 506: all versions
• Cisco Pix Firewall 515: all versions
• Cisco Pix Firewall 520: all versions
• Cisco Pix Firewall 525: all versions
• Cisco Pix Firewall 535: all versions

References

• http://secunia.com/advisories/43488
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml
• http://www.securitytracker.com/id?1025108
• http://www.vupen.com/english/advisories/2011/0493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65591
• http://secunia.com/advisories/43488
• http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6e14d.shtml
• http://www.securitytracker.com/id?1025108
• http://www.vupen.com/english/advisories/2011/0493
• https://exchange.xforce.ibmcloud.com/vulnerabilities/65591

Get alerted when CVE-2011-0396 or the next vulnerability affects your stack