CVE-2011-1653

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total...

10.0 HighPublic exploit

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.

Exploit likelihood

88.7%Up 1.7 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Record: CVE-2011-1653
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2011-1653
Updated: 2026-11-02

EUVDEUVD-2011-1653 No score

Record: EUVD-2011-1653
Updated: 2026-11-03

GitHub AdvisoriesGHSA-fw8j-3h2g-fxpw No score

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total...

Record: GHSA-fw8j-3h2g-fxpw
Weakness: CWE-89
Updated: 2026-11-02

Affected products

broadcom total defense

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	CA Total Defense Suite - reGenerateReports Stored procedure SQL Injection (Metasploit)	2011-10-02
Metasploit	CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection	2011-04-13

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1653 is a high vulnerability (CVSS 10.0) in Broadcom Total Defense, published April 15, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 88.7%, the 99th percentile. No source names a fixed version.

References

Show 19 moreShow less