CVE-2011-2547

no score yetEPSS 2.2%

cisco: no CVSS score yet. EPSS 2.2% chance of exploitation in the next 30 days.

The web-based management interface on Cisco SA 500 series security appliances with software before 2.1.19 allows remote authenticated users to execute arbitrary commands via crafted parameters to web forms, aka Bug ID CSCtq65681.

EPSS: 2.2% chance of exploitation in the next 30 days; higher than 82% of CVEs (scores of 2026-11-01)
CWE: CWE-264
Published: 2011-07-28
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

cisco:sa500_software
cisco:sa520
cisco:sa520w
cisco:sa540

References

http://secunia.com/advisories/45355
http://securitytracker.com/id?1025810
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b8915e.shtml
http://www.securityfocus.com/bid/48810
https://exchange.xforce.ibmcloud.com/vulnerabilities/68738

Check your stack JSON