CVE-2011-3289

Cisco IOS 12.4, 15.0-15.2 - Unauthenticated Configuration Read via No Service Password-Recovery Bypass

Title source: llm

Description

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640.

References (2)

Core 2

Core References

Release Notes x_refsource_confirm

http://www.cisco.com/en/US/docs/ios/15_1/release/notes/151-2TCAVS.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1027005

Scores

EPSS 0.0035

EPSS Percentile 27.1%

Details

CWE

CWE-264

Status published

Products (4)

cisco/ios 12.4

cisco/ios 15.0

cisco/ios 15.1

cisco/ios 15.2

Published May 02, 2012

Tracked Since Feb 18, 2026