VULNERABILITY INTELLIGENCE

CVE-2011-3305

CVSS score7.8 HIGH
EPSS probability21.59%
CISA KEVNot currently listed
Published2011-10-06
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:N/A:N

Description

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

Weakness classification

  • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Primary references