CVE-2011-3310

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 15.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2011-10-20 · updated 2026-06-16
Weakness: CWE-94

Description

The Home Page component in Cisco CiscoWorks Common Services before 4.1 on Windows, as used in CiscoWorks LAN Management Solution, Cisco Security Manager, Cisco Unified Service Monitor, Cisco Unified Operations Manager, CiscoWorks QoS Policy Manager, and CiscoWorks Voice Manager, allows remote authenticated users to execute arbitrary commands via a crafted URL, aka Bug IDs CSCtq48990, CSCtq63992, CSCtq64011, CSCtq64019, CSCtr23090, and CSCtt25535.

Affected products

Ciscoworks Common Services: through 4.0.1; 2.2, 3.0.5, 3.0.6, 3.1, 3.1.1, 3.2 (+1)
Microsoft Corporation Windows: all versions

References

http://secunia.com/advisories/46533
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-cs
http://www.securityfocus.com/bid/50284
https://exchange.xforce.ibmcloud.com/vulnerabilities/70759
http://secunia.com/advisories/46533
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20111019-cs
http://www.securityfocus.com/bid/50284
https://exchange.xforce.ibmcloud.com/vulnerabilities/70759

Get alerted when CVE-2011-3310 or the next vulnerability affects your stack