CVE-2011-0364

CVE Database · CVE-2011-0364

CVE-2011-0364

· N/AModified

CVSS v3.1

N/A

EPSS

19.62%

Published

Feb 18, 2011

Modified

Apr 28, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBCisco Security Agent Management Console - 'st_upload' Remote Code Execution TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Management Console (webagent.exe) in Cisco Security Agent 5.1, 5.2, and 6.0 before 6.0.2.145 allows remote attackers to create arbitrary files and execute arbitrary code via unspecified parameters in a crafted st_upload request.

Weaknesses (CWE)

CWE-94

Affected Products (3)

cisco · security_agentvulnerable

References (20)

http://secunia.com/advisories/43383

Vendor Advisory

http://secunia.com/advisories/43393

Vendor Advisory

http://securityreason.com/securityalert/8095

http://securityreason.com/securityalert/8197

http://securityreason.com/securityalert/8205

http://www.cisco.com/en/US/products/products_security_advisory09186a0080b6cee6.shtml

Vendor Advisory

http://www.securityfocus.com/archive/1/516505/100/0/threaded

http://www.securityfocus.com/bid/46420

http://www.securitytracker.com/id?1025088

http://www.vupen.com/english/advisories/2011/0424

KEV Catalog EPSS Scores Vendors All CVEs