CVE-2011-0951

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0...

5.0 Medium

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0.44.6 and 5.2 before 5.2.0.26.3 allows remote attackers to change arbitrary user passwords via unspecified vectors, aka Bug ID CSCtl77440.

Exploit likelihood

14.6%Down 25.6 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Record: CVE-2011-0951
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:P/A:N
Weakness: CWE-255
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-0951
Updated: 2026-11-02

EUVDEUVD-2011-0963 No score

Record: EUVD-2011-0963
Updated: 2026-11-03

GitHub AdvisoriesGHSA-4wp6-r9gv-37c2 No score

The web-based management interface in Cisco Secure Access Control System (ACS) 5.1 before 5.1.0...

Record: GHSA-4wp6-r9gv-37c2
Updated: 2026-11-02

Affected products

cisco secure access control system

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Cisco Secure ACS Unauthorized Password Change

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0951 is a medium vulnerability (CVSS 5.0) in Cisco Secure Access Control System, published April 1, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 14.6%, the 96th percentile. No source names a fixed version.