CVEvulnerability

CVE-2011-1646

9.0 HIGH Published 2011-05-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-94

Description

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.

Affected configurations

• cisco rvs4000 1 • cisco rvs4000 2 • cisco rvs4000 software 1.3.0.5 • cisco rvs4000 software 1.3.1.0 • cisco rvs4000 software 1.3.2.0 • cisco rvs4000 software 2.0.0.3 • cisco wrvs4400n 1.0 • cisco wrvs4400n 1.1 • cisco wrvs4400n 2 • cisco wrvs4400n software 1.3.0.5 • cisco wrvs4400n software 1.3.1.0 • cisco wrvs4400n software 1.3.2.0 • cisco wrvs4400n software 2.0.0.3

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References