Remote Code Execution in Cisco Security Agent Management Console

CVE-2011-0364

Summary

The Management Console (webagent.exe) of Cisco Security Agent versions 5.1, 5.2, and 6.0 prior to 6.0.2.145 is susceptible to remote code execution. This flaw allows remote attackers to craft malicious st_upload requests, leading to the ability to create arbitrary files and execute code on the affected system. Proper mitigation strategies should be implemented to safeguard against such unauthorized actions.

References