11000 series do not enforce restrictions for non-privileged users opening an FTP connection to them. Any user with a valid account can read or write any file on the system.
Users can gain unauthorized access to data.
Apply software upgrades as noted below. 11000 series switches do not enforce the correct restrictions for a non privileged user opening an FTP connection to them. All users with valid accounts can use the GET and PUT commands to read and write any file on the system. This vulnerability results in users gaining access to secure data. This vulnerability is documented as Cisco bug ID CSCdt64682.