Vulnerability CVE-2011-1647
Published: 2011-05-31   Modified: 2012-02-13

Description:
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.

Type:

CWE-200

 (Information Exposure)

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:N/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
None
None
Affected software
Cisco -> Rvs4000 software 
Cisco -> Wrvs4400n software 
Cisco -> Rvs4000 
Cisco -> Wrvs4400n 

 References:
http://www.securitytracker.com/id?1025565
http://www.securityfocus.com/bid/47985
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml
Copyright 2024, cxsecurity.com

 

Back to Top