Vulnerability CVE-2011-1645
Published: 2011-05-31   Modified: 2012-02-13

Description:
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.

Type:

CWE-16

 (Configuration)

CVSS2 => (AV:N/AC:M/Au:N/C:C/I:C/A:C)

CVSS Base Score
Impact Subscore
Exploitability Subscore
9.3/10
10/10
8.6/10
Exploit range
Attack complexity
Authentication
Remote
Medium
No required
Confidentiality impact
Integrity impact
Availability impact
Complete
Complete
Complete
Affected software
Cisco -> Rvs4000 software 
Cisco -> Wrvs4400n software 
Cisco -> Rvs4000 
Cisco -> Wrvs4400n 

 References:
http://www.securitytracker.com/id?1025565
http://www.securityfocus.com/bid/47988
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml
Copyright 2024, cxsecurity.com

 

Back to Top