CVE-2011-0396: Cisco Adaptive Security Appliance

High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.0 before 8.0(5.23), 8.1 before 8.1(2.49), 8.2 before 8.2(4.1), and 8.3 before 8.3(2.13), when a Certificate Authority (CA) is configured, allow remote attackers to read arbitrary files via unspecified vectors, aka Bug ID CSCtk12352.

Affected products

• Cisco Adaptive Security Appliance: version 8.0(2) only; version 8.0(3) only; version 8.0(4) only; version 8.0(5) only; version 8.1(1) only; version 8.1(2) only; …
• Cisco Adaptive Security Appliance Software: version 8.0 only; version 8.3(1) only
• Cisco ASA 5500
• Cisco ASA 5505
• Cisco ASA 5510
• Cisco ASA 5520
• Cisco ASA 5540
• Cisco ASA 5550
• Cisco ASA 5580
• Cisco Pix 500
• Cisco Pix 501
• Cisco Pix 506e
• Cisco Pix Firewall 506
• Cisco Pix Firewall 515
• Cisco Pix Firewall 520
• Cisco Pix Firewall 525
• Cisco Pix Firewall 535

Published 2011-02-25. Last modified 2026-06-16.