CVE-2011-4231
Last modified
CVE-2011-4231 is a vulnerability of currently unknown severity. Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq61128.. EPSS estimates a 0.59% chance of exploitation in the next 30 days.
Description
Cisco IOS 15.1 and 15.2 and IOS XE 3.x, when configured as an IPsec hub with X.509 certificates in use, allows remote authenticated users to cause a denial of service (segmentation fault and device crash) via unspecified vectors, aka Bug ID CSCtq61128.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios | 15.1 |
| Cisco | Ios | 15.2 |
| Cisco | Ios Xe | 3.1.0s |
| Cisco | Ios Xe | 3.1.0sg |
| Cisco | Ios Xe | 3.1.1s |
| Cisco | Ios Xe | 3.1.1sg |
| Cisco | Ios Xe | 3.1.2s |
| Cisco | Ios Xe | 3.1.3s |
| Cisco | Ios Xe | 3.1.4s |
| Cisco | Ios Xe | 3.2.0s |
| Cisco | Ios Xe | 3.2.0sg |
| Cisco | Ios Xe | 3.2.1s |
| Cisco | Ios Xe | 3.2.2s |
| Cisco | Ios Xe | 3.3.0s |
| Cisco | Ios Xe | 3.3.1s |
| Cisco | Ios Xe | 3.3.2s |
| Cisco | Ios Xe | 3.3.3s |
| Cisco | Ios Xe | 3.4.0as |
| Cisco | Ios Xe | 3.4.0s |
| Cisco | Ios Xe | 3.4.1s |
| Cisco | Ios Xe | 3.4.2s |
| Cisco | Ios Xe | 3.4.3s |
| Cisco | Ios Xe | 3.5.0s |
| Cisco | Ios Xe | 3.5.1s |
| Cisco | Ios Xe | 3.5.2s |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2011-4231?
How severe is CVE-2011-4231?
How do I fix CVE-2011-4231?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2011
- CVE-2011-4218Investintech.com SlimPDF Reader does not prevent faulting-in…
- CVE-2011-4219Investintech.com SlimPDF Reader does not prevent faulting-ad…
- CVE-2011-4220Investintech.com SlimPDF Reader does not properly restrict t…
- CVE-2011-4221Unspecified vulnerability in Investintech.com Able2Doc and A…
- CVE-2011-4222Unspecified vulnerability in Investintech.com Able2Extract a…
- CVE-2011-4223Unspecified vulnerability in Investintech.com Absolute PDF S…
- CVE-2011-4232The web server in Cisco Unified MeetingPlace 6.1 and 8.5 pro…
- CVE-2011-4237CRLF injection vulnerability in autologin.jsp in Cisco Cisco…
- CVE-2011-4244Heap-based buffer overflow in the RealVideo renderer in Real…
- CVE-2011-4245The RealVideo renderer in RealNetworks RealPlayer before 15.…
- CVE-2011-4246The AAC codec in RealNetworks RealPlayer before 15.0.0 and M…
- CVE-2011-4247RealNetworks RealPlayer before 15.0.0 allows remote attacker…
Are you affected by CVE-2011-4231?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST