CVEvulnerability

CVE-2011-1647

5.0 MEDIUM Published 2011-05-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2011-05-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-200

Description

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.

Affected configurations

• cisco rvs4000 1 • cisco rvs4000 2 • cisco rvs4000 software 1.3.0.5 • cisco rvs4000 software 1.3.1.0 • cisco rvs4000 software 1.3.2.0 • cisco rvs4000 software 2.0.0.3 • cisco wrvs4400n 1.0 • cisco wrvs4400n 1.1 • cisco wrvs4400n 2 • cisco wrvs4400n software 1.3.0.5 • cisco wrvs4400n software 1.3.1.0 • cisco wrvs4400n software 1.3.2.0 • cisco wrvs4400n software 2.0.0.3

Related

Weakness · CWE (1)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References