CVE-2011-3309: Cisco 5500 Series Adaptive Security Appliance

Medium severity, CVSS 4.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 through 8.4 process IKE requests despite a vpnclient mode configuration, which allows remote attackers to obtain potentially sensitive information by reading IKE responder traffic, aka Bug ID CSCtt07749.

Affected products

• Cisco 5500 Series Adaptive Security Appliance
• Cisco Adaptive Security Appliance Software: version 8.2(1) only; version 8.2(2) only; version 8.2(3) only; version 8.2(3.9) only; version 8.2(4) only; version 8.2(4.1) only; …

Published 2012-05-02. Last modified 2026-06-16.