Vulnerability record · CVE-2011-3296 · published 6 October 2011

CVE-2011-3296: Cisco firewall services module software vulnerability

Cisco · Firewall Services Module Software

Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875.

7.8 CVSS 2.0 High EPSS 1.8% · top 22.8% CWE-399 · CWE-399

7.8CVSS 2.0 base score

1.8%EPSS exploitation probability, 30 days

NoNot in CISA KEV

3Affected product versions listed by NVD

4References

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Catalyst 6500 Cisco

Catalyst 7600 Cisco

Firewall Services Module Software Cisco

References

Link	Tags
http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/70326
http://www.cisco.com/warp/public/707/cisco-sa-20111005-fwsm.shtml	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/70326

Track CVE-2011-3296 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.0CVE-2012-4661Cisco adaptive security appliance software memory buffer overflow vulnerabilityStack-based buffer overflow in the DCERPC inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Mod…EPSS 4.0%29 Oct 2012 7.9CVE-2011-3298Cisco adaptive security appliance software improper authentication vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services module in Cisco Catalyst 6500 series devices, with software 7.0 be…EPSS 0.86%6 Oct 2011 7.8CVE-2013-1149Cisco adaptive security appliance software vulnerabilityCisco Adaptive Security Appliances (ASA) devices with software 7.x before 7.2(5.10), 8.0 before 8.0(5.28), 8.1 and 8.2 before 8.2(5.35), 8.3 before 8…EPSS 1.3%11 Apr 2013 7.8CVE-2013-1155Cisco firewall services module software improper authentication vulnerabilityThe auth-proxy functionality in Cisco Firewall Services Module (FWSM) software 3.1 and 3.2 before 3.2(20.1), 4.0 before 4.0(15.2), and 4.1 before 4.1…EPSS 1.3%11 Apr 2013 7.8CVE-2012-4660Cisco adaptive security appliance software memory buffer overflow vulnerabilityThe SIP inspection engine on Cisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500…EPSS 1.8%29 Oct 2012 7.8CVE-2012-3058Cisco adaptive security appliance software vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with softwar…EPSS 2.0%20 Jun 2012 7.8CVE-2012-0355Cisco adaptive security appliance software improper input validation vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with softwar…EPSS 2.7%15 Mar 2012 7.8CVE-2012-0356Cisco firewall services module software improper input validation vulnerabilityCisco Adaptive Security Appliances (ASA) 5500 series devices, and the ASA Services Module (ASASM) in Cisco Catalyst 6500 series devices, with softwar…EPSS 2.1%15 Mar 2012

Source: NIST National Vulnerability Database (record CVE-2011-3296), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.