CVE-2011-4237: CRLF injection vulnerability in autologin.jsp in Cisco CiscoWorks Common Services 4.0, as used in Cisco Pri...

Security readout for executives and security teams

This issue affects an older Cisco network management component. A crafted request to autologin.jsp could make the server add attacker-controlled HTTP headers, enabling response-splitting style abuse. The public bundle does not provide a CVSS score, confirmed patch level, or active exploitation evidence. Exposure is most likely in legacy CiscoWorks Common Services 4.0 deployments, including Cisco Prime LAN Management Solution environments that include that component. Internet exposure would increase concern, but the source bundle does not identify deployment prevalence or default exposure. Handle as a legacy infrastructure risk with uncertain severity. Prioritize identification and containment before emergency response. Escalate if the affected management interface is exposed beyond trusted administrative networks or if vendor guidance confirms a fixed upgrade path. Mitigation focus: Identify any CiscoWorks Common Services 4.0 or Cisco Prime LMS installations.; Review Cisco guidance and CSCtu18693 references for supported fixes or upgrade paths.; Restrict access to affected management interfaces to trusted administrative networks..

Prepared

Jun 24, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.