{"schema_version":"public-product-v1.1","generated_at":"2026-07-21T10:12:09Z","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","advisory":{"id":"Cisco-SA-20111019-CVE-2011-2585","slug":"cisco-sa-20111019-cve-2011-2585","vendor":"Cisco","title":"Cisco Show and Share File Upload Arbitrary Code Execution Vulnerability","summary":"Cisco Show and Share contains a vulnerability that could allow an authenticated, remote attacker to execute code on a vulnerable device. The vulnerability is due to insecure restrictions when allowing videos to be uploaded to an affected device.  An authenticated, remote attacker with privileges to upload videos could take advantage of this vulnerability to upload code to the device that would execute in the context of the web server. Cisco has confirmed this vulnerability in a security advisory and has released updated software. The attacker may need access to an internal, private network and would need valid login credentials to be able to upload files to the vulnerable device.  These factors could limit the potential for a possible attempted exploit. It should be noted that the uploaded code would execute in the context of the web server.  This service runs with non-root privileges.  This factor could limit the severity of the impact of a successful exploit. Cisco indicates through the CVSS score that functional exploit code exists; however, the code is not known to be publicly available.","severity":"Medium","published_at":"2011-10-19T16:34:09Z","updated_at":"2011-10-19T16:34:09Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20111019-CVE-2011-2585","csaf_url":"https://sec.cloudapps.cisco.com/security/center/contentjson/CiscoSecurityAdvisory/Cisco-SA-20111019-CVE-2011-2585/csaf/Cisco-SA-20111019-CVE-2011-2585.json","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure."},"freshness":{"last_source_refreshed_at":"2026-07-21T05:16:34Z","latest_source_refresh_at":"2026-07-21T05:16:34Z","oldest_source_refresh_at":"2026-07-21T03:00:03Z","all_sources_fresh":true,"sources":[{"source":"cisco_advisories","label":"Cisco advisories","last_success_at":"2026-07-21T03:00:03Z","stale":false},{"source":"cisco_csaf","label":"Cisco CSAF","last_success_at":"2026-07-21T05:14:24Z","stale":false},{"source":"nvd_cves","label":"NVD CVEs","last_success_at":"2026-07-21T05:16:30Z","stale":false},{"source":"cisa_kev","label":"CISA KEV","last_success_at":"2026-07-21T05:16:31Z","stale":false},{"source":"first_epss","label":"EPSS","last_success_at":"2026-07-21T05:16:34Z","stale":false}]},"summary":{"cve_count":1,"visible_product_count":1,"public_evidence_count":1,"kev_count":0,"highest_epss":0.02131},"cves":[{"id":"CVE-2011-2585","kev":false,"epss":{"score":0.02131,"percentile":0.79943,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"}}],"public_evidence":[{"product":{"name":"Cisco Show and Share","slug":"cisco-show-and-share","vendor":"Cisco"},"cve":{"id":"CVE-2011-2585"},"evidence_type":"structured_affected","evidence_label":{"scope":"CSAF product evidence","label":"product_status known affected"},"evidence_source":"Cisco CSAF","source":"Cisco CSAF","source_document_fetched_at":"2026-07-20T04:53:58Z","csaf_status":"known_affected","csaf_product_status":"known_affected","csaf_product_status_path":"vulnerabilities[].product_status.known_affected","raw_product_name":"Cisco Show and Share","exposure_verdict":"not_assessed","verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","exposure_verdict_reason":"Public evidence does not evaluate exact release, platform, enabled features, configuration, compensating controls, or live exposure.","kev":false,"epss":{"score":0.02131,"score_date":"2026-07-20","updated_at":"2026-07-21T05:16:32Z"},"published_at":"2011-10-19T16:34:09Z","updated_at":"2011-10-19T16:34:09Z","advisory_updated_at":"2011-10-19T16:34:09Z","source_url":"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/Cisco-SA-20111019-CVE-2011-2585","row_display_order":1}]}