CVE-2011-3305

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

CVSS v2.0 NVD

7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N

EPSS

21.59% chance of exploitation in the next 30 days, 98th percentile

Published

2011-10-06

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/cisco_nac_manager_…

Security advisories

• http://www.cisco.com/warp/public/707/cisco-sa-20111005-nac.shtml
• http://www.securityfocus.com/bid/49954

References

• CVE Record
• NVD entry