PT-2011-2770

CVE-2011-0935

·

Published

2011-04-14

·

Updated

2011-04-21

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1
Description The issue concerns the PKI functionality, which fails to prevent permanent caching of certain public keys. This allows remote attackers to bypass authentication and potentially have other impacts by leveraging an IKE peer relationship where a key was previously valid but later revoked.
Recommendations For Cisco IOS versions 15.0 through 15.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾