CVE-2011-0951

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 14.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-04-04 · updated 2026-06-16
Weakness: CWE-255

Description

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

Affected products

Cisco Secure Access Control System: 5.1, 5.1.0.44, 5.1.0.44.1, 5.1.0.44.2, 5.1.0.44.3, 5.1.0.44.4 (+5)

References

http://secunia.com/advisories/43924
http://securitytracker.com/id?1025271
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml
http://www.securityfocus.com/bid/47093
http://www.vupen.com/english/advisories/2011/0821
https://exchange.xforce.ibmcloud.com/vulnerabilities/66471
http://secunia.com/advisories/43924
http://securitytracker.com/id?1025271
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74117.shtml
http://www.securityfocus.com/bid/47093
http://www.vupen.com/english/advisories/2011/0821
https://exchange.xforce.ibmcloud.com/vulnerabilities/66471

Get alerted when CVE-2011-0951 or the next vulnerability affects your stack