CVE-2011-4661

En bref

Sévérité: Non disponible
EPSS: EPSS 1.01 % · centile 63 (2026-10-27)
État: PUBLISHED
Publiée: 2020-02-12
Mise à jour: 2024-11-15
Attribuée par: cisco
Statut NVD: Modified

Description

A memory leak vulnerability exists in Cisco IOS before 15.2(1)T due to a memory leak in the HTTP PROXY Server process (aka CSCtu52820), when configured with Cisco ISR Web Security with Cisco ScanSafe and User Authenticaiton NTLM configured.

Scores

Version	Score	Vecteur	Évalué par
CVSS 3.1	HIGH 7.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	NVD · nvd@nist.gov (Primary)
CVSS 2.0	MEDIUM 4.3	AV:N/AC:M/Au:N/C:N/I:N/A:P	NVD · nvd@nist.gov (Primary)

Faiblesses (CWE)

CWE-772

Références européennes

ENISA EUVD · EUVD-2011-4579
GCVE · GCVE-0-2011-4661

Configurations affectées (CPE NVD)

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:* < 15.2\(1\)t

Produits affectés

Produit	Versions
Cisco · IOS	affected before 15.2(1)T

Références

https://www.cisco.com/c/en/us/td/docs/ios/15_2m_and_t/release/notes/15_2m_and_t/152-1TCAVS.html

Sources

Source	Licence
CVE List (CVEProject cvelistV5)	CVE Program Terms of Use
EPSS (FIRST.org)	FIRST — attribution requested
ENISA EUVD	ENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feeds	Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD