Remote code execution in Cisco IOS XE - CVE-2011-3271
Published: April 11, 2018
Vulnerability identifier: #VU11760
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2011-3271
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote unauthenticated attacker to execute arbitrary code on the target system.
The weakness exists due to an unspecified flaw. A remote attacker can execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
The weakness exists due to an unspecified flaw. A remote attacker can execute arbitrary code.
Successful exploitation of the vulnerability may result in system compromise.
Affected software
Cisco IOS XE
How to mitigate CVE-2011-3271
Update to versions 16.1(0.14), 15.4(3)M, 15.4(2)T1, 15.4(2)T, 15.4(2)CG, 15.4(1)T2, 15.4(1)T1, 15.4(1)T, 15.4(1)CG1, 15.4(1)CG, 15.3(3)XB12, 15.3(3)M3, 15.3(3)M2, 15.3(3)M1, 15.3(3)M, 15.3(2)T4, 15.3(2)T3, 15.3(2)T2, 15.3(2)T1, 15.3(2)T, 15.3(1)T4, 15.3(1)T3, 15.3(1)T2, 15.3(1)T1, 15.3(1)T, 15.2(5.0)ST, 15.2(4.0.64a)E, 15.2(4.0)ST, 15.2(4)XB11, 15.2(4)M6b, 15.2(4)M6a, 15.2(4)M6, 15.2(4)M5, 15.2(4)M4, 15.2(4)M3, 15.2(4)M2, 15.2(4)M1, 15.2(4)JB6, 15.2(4)JB5m, 15.2(4)JB5, 15.2(4)JB4, 15.2(4)JB3s, 15.2(4)JB3b, 15.2(4)JB3a, 15.2(4)JB3, 15.2(4)JB1, 15.2(4)JB, 15.2(4)JAZ, 15.2(4)JA1, 15.2(4)JA, 15.2(4)GC2, 15.2(4)GC1, 15.2(4)GC, 15.2(3)T4, 15.2(3)T3, 15.2(3)T2, 15.2(3)T1, 15.2(3)T, 15.2(3)GCA1, 15.2(3)GCA, 15.2(3)GC1, 15.2(3)GC, 15.2(2)T4, 15.2(2)T3, 15.2(2)T1, 15.2(2)T, 15.2(2)JB3, 15.2(2)JB2, 15.2(2)JB, 15.2(2)JAX, 15.2(2)JA1, 15.2(2)JA, 15.2(2)E, 15.2(1.0.0)IPI2, 15.2(1)T4, 15.2(1)T2, 15.2(1)T1, 15.2(1)T, 15.2(1)EY, 15.2(1)E3, 15.2(1)E2, 15.2(1)E1, 15.2(1)E, 15.2(0.19)T, 15.2(0.17.3)PIA17, 15.2(0.13.9)PIB17, 15.1(4)M9, 15.1(4)M8, 15.1(4)M7, 15.1(4)M6, 15.1(4)M5, 15.1(4)M4, 15.1(4)M3, 15.1(4)M2, 15.1(4)GC2, 15.1(4)GC1, 15.1(3)T4, 15.1(3)T3, 15.1(3)T2, 15.1(2)SY3, 15.1(2)SY2, 15.1(2)SY1, 15.1(2)SY, 15.1(2)SG4, 15.1(2)SG3, 15.1(2)SG2, 15.1(2)SG1, 15.1(2)SG, 15.1(1)SY3, 15.1(1)SY2, 15.1(1)SY1, 15.1(1)SY, 15.1(1)SG5.170, 15.1(1)SG5.169, 15.1(1)SG5.163, 15.1(1)SG5.124, 15.1(1)SG5.103, 15.1(1)SG5.98, 15.1(1)SG5.83.1, 15.1(1)SG5.78.11, 15.1(1)SG5.64, 15.1(1)SG5.63, 15.0(4.4)DPB1, 15.0(4.1)SID, 15.0(2.26)DPB1.47, 15.0(2)SE6, 15.0(2)SE5, 15.0(2)SE4, 15.0(2)SE3, 15.0(2)SE2, 15.0(2)SE1, 15.0(2)SE, 15.0(2)EZ, 15.0(2)EY2, 15.0(2)EY1, 15.0(2)EY, 15.0(2)EX5, 15.0(2)EX4, 15.0(2)EX3, 15.0(2)EX1, 15.0(2)EX, 15.0(2)EK1, 15.0(2)EK, 15.0(2)EJ1, 15.0(2)EJ, 15.0(2)EH, 15.0(2)ED, 15.0(2)EC, 15.0(2)EB, 15.0(2)EA, 15.0(1)SE3, 15.0(1)SE2, 15.0(1)SE, 15.0(1)EY2, 12.2(60)EZ5, 12.2(60)EZ4, 12.2(60)EZ3, 12.2(60)EZ2, 12.2(60)EZ1, 12.2(60)EZ, 12.2(58)SE2, 12.2(58)SE1, 12.2(58)SE, 12.2(58)EZ, 12.2(58)EY, 12.2(55)SE9, 12.2(55)SE8, 12.2(55)SE7, 12.2(55)SE6, 12.2(55)SE5, 12.2(55)SE4, 12.2(55)SE3 or 12.2(55)EX3.