CVE-2011-1653: Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD)...

Security readout for executives and security teams

CVE-2011-1653 affects CA Total Defense r12 before SE2. A remote attacker could abuse SQL injection flaws in the Unified Network Control Server to run arbitrary SQL commands. For executives, the concern is compromise or manipulation of security management data in an older endpoint-security management platform. Exposure is likely limited to organizations still running CA Total Defense r12 before SE2, especially where the UNC Server or management console is reachable by untrusted networks or broad internal users. Prioritize remediation where legacy CA Total Defense still manages security operations or sensitive endpoint data. The issue is old, but reachable unpatched management servers remain a meaningful risk. Mitigation focus: Upgrade CA Total Defense r12 to SE2 or a later vendor-supported release.; Restrict access to the UNC Server and management console to trusted administrators.; Review CA/Broadcom guidance for any additional product-specific hardening steps..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.