CVE-2011-2060

Severity: medium (CVSS 4.9 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-10-22 · updated 2026-06-16
Weakness: CWE-399

Description

The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(5.3), 8.3 before 8.3(2.20), and 8.4 before 8.4(2.1) does not properly handle non-ASCII characters in an interface description, which allows local users to cause a denial of service (reload without configuration) via a crafted description, aka Bug ID CSCtq50523.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: 7.0, 7.0(0), 7.0(1), 7.0(2), 7.0(4), 7.0(5) (+67)

References

http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html
http://www.cisco.com/en/US/docs/security/asa/asa84/release/notes/asarn84.html

Get alerted when CVE-2011-2060 or the next vulnerability affects your stack