{"api_version":"1","generated_at":"2026-07-23T06:18:12+00:00","cve":"CVE-2011-0963","urls":{"html":"https://cve.report/CVE-2011-0963","api":"https://cve.report/api/cve/CVE-2011-0963.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-0963","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-0963"},"summary":{"title":"CVE-2011-0963","description":"The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922.","state":"PUBLISHED","assigner":"cisco","published_at":"2011-03-31 22:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securitytracker.com/id?1025272","name":"http://www.securitytracker.com/id?1025272","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco NAC Guest Server Configuration Error Lets Remote Users Bypass Authentication and Access the Network - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Security Advisory: Cisco Network Admission Control Guest Server System Software Authentication Bypass Vulnerability - Cisco Systems","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-0963","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-0963","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"nac_guest_server","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"1.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"1.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"1.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"1.1.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"1.1.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"2.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"2.0.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"963","vulnerable":"1","versionEndIncluding":"2.0.2","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"nac_guest_server_software","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:14:26.455Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1025272","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1025272"},{"name":"20110330 Cisco Network Admission Control Guest Server System Software Authentication Bypass Vulnerability","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-03-30T00:00:00.000Z","descriptions":[{"lang":"en","value":"The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2016-12-05T16:57:01.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"1025272","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1025272"},{"name":"20110330 Cisco Network Admission Control Guest Server System Software Authentication Bypass Vulnerability","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2011-0963","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1025272","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1025272"},{"name":"20110330 Cisco Network Admission Control Guest Server System Software Authentication Bypass Vulnerability","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b74114.shtml"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2011-0963","datePublished":"2011-03-31T22:00:00.000Z","dateReserved":"2011-02-10T00:00:00.000Z","dateUpdated":"2024-08-06T22:14:26.455Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-03-31 22:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:nac_guest_server:*:*:*:*:*:*:*:*","matchCriteriaId":"0948BDF8-94FA-4911-907A-6D0B1A820472"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:*:*:*:*:*:*:*:*","versionEndIncluding":"2.0.2","matchCriteriaId":"495B5D55-0941-451B-998E-41E6FEC17E16"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:1.0.0:*:*:*:*:*:*:*","matchCriteriaId":"AFC043FE-B7C8-416A-985D-18C2FC59E780"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:1.1.0:*:*:*:*:*:*:*","matchCriteriaId":"5587EBF9-CB6E-4429-BC1A-E029657160E7"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:1.1.1:*:*:*:*:*:*:*","matchCriteriaId":"7297C9B5-E37E-48A6-B5FB-87EEBF25EC63"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:1.1.2:*:*:*:*:*:*:*","matchCriteriaId":"A9C63282-A4E2-4BC4-93B8-B2CBF3ABE4C8"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:1.1.3:*:*:*:*:*:*:*","matchCriteriaId":"DAE1F91B-37A0-4992-AE23-1E0473243F3C"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:2.0.0:*:*:*:*:*:*:*","matchCriteriaId":"E06B4395-92AA-4DE3-B4B5-D48843BF850B"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:nac_guest_server_software:2.0.1:*:*:*:*:*:*:*","matchCriteriaId":"294DCA83-6F8F-4381-85DD-0C1FF66537A8"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"963","Ordinal":"1","Title":"CVE-2011-0963","CVE":"CVE-2011-0963","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"963","Ordinal":"1","NoteData":"The default configuration of the RADIUS authentication feature on the Cisco Network Admission Control (NAC) Guest Server with software before 2.0.3 allows remote attackers to bypass intended access restrictions and obtain network connectivity via unspecified vectors, aka Bug ID CSCtj66922.","Type":"Description","Title":"CVE-2011-0963"},{"CveYear":"2011","CveId":"963","Ordinal":"2","NoteData":"2011-03-31","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"963","Ordinal":"3","NoteData":"2016-12-05","Type":"Other","Title":"Modified"}]}}}