CVE-2011-3289: Cisco IOS

Low severity, CVSS 3.6. EPSS: 0.3% chance of exploitation in the next 30 days.

Cisco IOS 12.4 and 15.0 through 15.2 allows physically proximate attackers to bypass the No Service Password-Recovery feature and read the start-up configuration via unspecified vectors, aka Bug ID CSCtr97640.

Affected products

• Cisco IOS: version 12.4 only; version 15.0 only; version 15.1 only; version 15.2 only

Published 2012-05-02. Last modified 2026-06-16.