CVE-2011-3285: CRLF injection vulnerability in /+CSCOE+/logon.html on Cisco Adaptive Security Appliances (ASA) 5500 series...

Security readout for executives and security teams

CVE-2011-3285 is a Cisco ASA 5500 series web login issue. A remote attacker could inject HTTP headers through the ASA logon page and potentially cause HTTP response splitting. Business urgency depends on whether old ASA 8.0 through 8.4 devices still expose this page to untrusted users. Exposure is most likely on Cisco ASA 5500 series appliances running ASA software 8.0 through 8.4 where the affected logon page is reachable. The provided affected-product metadata is incomplete, so asset inventory should rely on the CVE description and Cisco guidance. Prioritize this as a legacy perimeter-device review item. It is potentially serious if exposed, but the bundle lacks severity scoring and exploitation evidence. Confirm whether affected ASA versions remain in service before emergency escalation. Mitigation focus: Identify any Cisco ASA 5500 series devices still running software 8.0 through 8.4.; Check Cisco release notes and advisories for the vendor-approved fixed or interim release.; Upgrade or retire affected ASA software according to Cisco guidance..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.