CVE-2011-0935

CRITICAL

The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact ...

Affects 1 product across 1 vendor.

CVSS 2.010.0
EPSS4.0%
Percentile90th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
CWE Weakness Definitions
CWE-310: Cryptographic Issues

Broad class covering misuse of cryptography: weak algorithms, insufficient key length, improper certificate validation.

◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2011. A critical vulnerability affects Cisco systems (CVE-2011-0935). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2011-GLOBAL-319235-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2011-0935?
This vulnerability was disclosed in 2011. A critical vulnerability affects Cisco systems (CVE-2011-0935). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2011-0935?
CVE-2011-0935 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 4.0%.
Is CVE-2011-0935 actively exploited?
No confirmed active exploitation of CVE-2011-0935 as of 2026-09-25.
How do I remediate CVE-2011-0935?
Priority: MEDIUM. Advisory: http://www.cisco.com/en/US/docs/ios/15_1s/release/notes/15_1s_caveats_15_1_1s.html PSIRT: [email protected]
What systems are affected by CVE-2011-0935?
CVE-2011-0935 affects Cisco Ios.
Vulnerability Details
CVE IDCVE-2011-0935
BSIDBS-2011-GLOBAL-319235-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2011-04-14
Last Modified2026-06-16
ICS Relevance55%
Weakness (CWE)
Cryptographic Issues
Domains
NETWORK-INFRA
SourceNVD
Official Description

The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact by leveraging an IKE peer relationship in which a key was previously valid but later revoked, aka Bug ID CSCth82164, a different vulnerability than CVE-2010-4685.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The PKI functionality in Cisco IOS 15.0 and 15.1 does not prevent permanent caching of certain public keys, which allows remote attackers to bypass authentication and have unspecified other impact by leveraging an IKE peer relationship in which a key was previously valid but later revoked, aka Bug ID CSCth82164, a different vulnerability than CVE-2010-4685. CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Cisco Ios 15.0 15.1
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 5663 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash1a8b3275f362764df627a78f80e2fe5280967ad5de92947cd6432a31df6ca49e619a1b432b34f38cfe9d3b8fc92ca22ac2c8af657c9a8caa51ce1a9fa9478e2b
Related CVEs affecting Cisco
CVE-2010-0570 10.0 Cisco Digital Media Manager (DMM) 5.0.x and 5.1.x has a default password for ... CVE-2011-0382 10.0 The CGI subsystem on Cisco TelePresence Recording Server devices with softwar... CVE-1999-0775 10.0 Cisco Gigabit Switch routers running IOS allow remote attackers to forward un... CVE-2003-1096 10.0 The Cisco LEAP challenge/response authentication mechanism uses passwords in ... CVE-2000-1054 10.0 Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlie...
View all Cisco CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →