CVE-2011-3305 in the critical feed json
Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files vi…
published 2011-10-06 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-3269
- cvss
- 7.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 21.6%
- EPSS 21.6% chance of exploitation in 30 days, percentile 97%
- public exploits
- 1
- Metasploit
Summary
Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.
Exploit prediction
21.59% chance of exploitation in the next 30 days, higher than 97% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit auxiliary/scanner/http/cisco_nac_manager_traversal Cisco Network Access Manager Directory Traversal Vulnerability metasploit auxiliary, normal rank
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Classification
- Weakness
-
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
-
cisco.com
/warp/public/707/cisco-sa-20111005-nac.shtml
vendor-advisory
-
securitytracker.com
/id?1026142
vdb-entry
-
secunia.com
/advisories/46309
third-party-advisory
-
securityfocus.com
/bid/49954
vdb-entry
-
osvdb.org
/76080
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/70335
vdb-entry
Sources
- CVE List CVE-2011-3305
- NVD CVE-2011-3305
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.