CVE-2011-3305

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows...

7.8 High

CVE-2011-3305 is a high vulnerability (CVSS 7.8) in Cisco Nac Manager, published October 6, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 21.6%, the 97th percentile. No source names a fixed version.

What does this mean?

Severity: 7.8 HighCVSS 2.0, NVD
Exploit chance: 21.6%EPSS, 97th percentile
Exploitation: None known1 public exploit
Fixed in: No fix listedNo source names one

Description

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

Exploit likelihood

21.6%Down 19.3 points since Feb 4, 2022

Affected products

cisco nac manager

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Metasploit	Cisco Network Access Manager Directory Traversal Vulnerability

What each source reports

NVD Score used7.8

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

Record: CVE-2011-3305
CVSS 2.0: 7.8 HighAV:N/AC:L/Au:N/C:C/I:N/A:N
Weakness: CWE-22
Updated: 2026-11-02

CVE ListNo score

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

Record: CVE-2011-3305
Updated: 2026-11-02

EUVDEUVD-2011-3269No score

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

Record: EUVD-2011-3269
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wg34-hr85-f688No score

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows...

Directory traversal vulnerability in Cisco Network Admission Control (NAC) Manager 4.8.x allows remote attackers to read arbitrary files via crafted traffic to TCP port 443, aka Bug ID CSCtq10755.

Record: GHSA-wg34-hr85-f688
Weakness: CWE-22
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, Metasploit, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

Description

Exploit likelihood

Affected products

Public exploits

What each source reports

History

References