CVE-2011-3309

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-05-02 · updated 2026-06-16
Weakness: CWE-200

Description

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749.

Affected products

Cisco 5500 Series Adaptive Security Appliance: all versions
Cisco ASA Software: 8.2(1), 8.2(2), 8.2(3), 8.2(3.9), 8.2(4), 8.2(4.1) (+16)

References

http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html
http://www.securitytracker.com/id?1027008
http://www.cisco.com/web/software/280775065/45357/ASA-825-Interim-Release-Notes.html
http://www.securitytracker.com/id?1027008

Get alerted when CVE-2011-3309 or the next vulnerability affects your stack