CVE Feed

    Dashboard / CVE / CVE-2011-3297

    CVE-2011-3297

    Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when certain authentication configurations are used, allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access, aka Bug ID CSCtn15697.

    Published:Oct 6, 2011
    Last Modified:Apr 11, 2025
    EPS:Oct 6, 2011
    EPSS Score:0.00794
    CVSS Score:7.8

    Affected Products

    Vendor
    Cisco
    Product
    Catalyst 6500
    Vendor
    Cisco
    Product
    Catalyst 7600
    Vendor
    Cisco
    Product
    Firewall Services Module Software

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Related CVEs

    CVE-2017-12238 (CVSS 6.5) — A vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS 15.0 through 15.4 for Cisco Cataly…
    CVE-2016-6366 (CVSS 8.8) — Buffer overflow in Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, ASA 5500-X, A…
    CVE-2012-5037 (CVSS 4.6) — The ACL implementation in Cisco IOS before 15.1(1)SY on Catalyst 6500 and 7600 devices allows local users to c…
    CVE-2014-2124 (CVSS 7.1) — Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, al…
    CVE-2013-1100 (CVSS 5.4) — The HTTP server in Cisco IOS on Catalyst switches does not properly handle TCP socket events, which allows rem…
    CVE-2012-4661 (CVSS 9) — Stack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 s…
    CVE-2012-4660 (CVSS 7.8) — The SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Service…
    CVE-2012-4663 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4662 (CVSS 7.1) — The DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Serv…
    CVE-2012-4659 (CVSS 7.1) — The AAA functionality in the IPv4 SSL VPN implementations on Cisco Adaptive Security Appliances (ASA) 5500 ser…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High