CVEvulnerability
CVE-2011-1645
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-05-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-16
Description
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.
Affected configurations
• cisco rvs4000 1
• cisco rvs4000 2
• cisco rvs4000 software 1.3.0.5
• cisco rvs4000 software 1.3.1.0
• cisco rvs4000 software 1.3.2.0
• cisco rvs4000 software 2.0.0.3
• cisco wrvs4400n 1.0
• cisco wrvs4400n 1.1
• cisco wrvs4400n 2
• cisco wrvs4400n software 1.3.0.5
• cisco wrvs4400n software 1.3.1.0
• cisco wrvs4400n software 1.3.2.0
• cisco wrvs4400n software 2.0.0.3
Related
Weakness · not in database (1)
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml Vendor Advisory
- http://www.securityfocus.com/bid/47988 www.securityfocus.com
- http://www.securitytracker.com/id?1025565 www.securitytracker.com
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml Vendor Advisory
- http://www.securityfocus.com/bid/47988 www.securityfocus.com
- http://www.securitytracker.com/id?1025565 www.securitytracker.com