CVE-2011-2054: Cisco ASA 5500 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability in the Cisco ASA that could allow a remote attacker to successfully authenticate using the Cisco AnyConnect VPN client if the Secondary Authentication type is LDAP and the password is left blank, providing the primary credentials are correct. The vulnerabilities is due to improper input validation of certain parameters passed to the affected software. An attacker must have the correct primary credentials in order to successfully exploit this vulnerability.

Affected products

• Cisco ASA 5500 Firmware: version 8.4(1) only
• Cisco ASA 5510 Firmware: version 8.4(1) only
• Cisco ASA 5512-X Firmware: version 8.4(1) only
• Cisco ASA 5515-X Firmware: version 8.4(1) only
• Cisco ASA 5520 Firmware: version 8.4(1) only
• Cisco ASA 5525-X Firmware: version 8.4(1) only
• Cisco ASA 5540 Firmware: version 8.4(1) only
• Cisco ASA 5545-X Firmware: version 8.4(1) only
• Cisco ASA 5550 Firmware: version 8.4(1) only
• Cisco ASA 5555-X Firmware: version 8.4(1) only
• Cisco ASA 5580 Firmware: version 8.4(1) only
• Cisco ASA 5585-X Firmware: version 8.4(1) only

Published 2020-02-19. Last modified 2026-06-16.