CVE-2011-0364 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 19.6% (pctl 97)
Patch early
A public exploit exists.
Description
The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 19.62% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-94 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2011-02-19 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| cisco | security agent |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Cisco Security Agent Management Console - 'st_upload' Remote Code Execution | 2011-04-12 |
References
- http://secunia.com/advisories/43383
- http://secunia.com/advisories/43393
- http://securityreason.com/securityalert/8095
- http://securityreason.com/securityalert/8197
- http://securityreason.com/securityalert/8205
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
- http://www.securityfocus.com/archive/1/516505/100/0/threaded
- http://www.securityfocus.com/bid/46420
- http://www.securitytracker.com/id?1025088
- http://www.vupen.com/english/advisories/2011/0424
- http://www.zerodayinitiative.com/advisories/ZDI-11-088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65436
- http://secunia.com/advisories/43383
- http://secunia.com/advisories/43393
- http://securityreason.com/securityalert/8095
- http://securityreason.com/securityalert/8197
- http://securityreason.com/securityalert/8205
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml
- http://www.securityfocus.com/archive/1/516505/100/0/threaded
- http://www.securityfocus.com/bid/46420
→ the Explorer · watch your stack · NVD