CVE-2011-2165

CVE-2011-2165 is a plaintext command injection vulnerability affecting the STARTTLS implementation in WatchGuard XCS versions 9.0 and 9.1. A man-in-the-middle attacker can exploit this by sending cleartext commands that are processed after TLS is established, effectively injecting commands into encrypted SMTP sessions. This vulnerability has a CVSS score of 6.8, indicating a medium severity with network-based attacks and medium complexity, potentially leading to partial confidentiality, integrity, and availability compromise. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists for WatchGuard XCS 10.0, and there is minimal community discussion or media coverage.