9.3
CVSSv2

CVE-2011-1645

Published: 31/05/2011 Updated: 07/09/2011
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x prior to 1.3.3.4 and 2.x prior to 2.0.2.7, and the WRVS4400N Gigabit Security Router with software prior to 2.0.2.1, allows remote malicious users to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco rvs4000 2

cisco rvs4000 1

cisco rvs4000_software 2.0.0.3

cisco rvs4000_software 1.3.2.0

cisco rvs4000_software 1.3.1.0

cisco rvs4000_software 1.3.0.5

cisco wrvs4400n 1.1

cisco wrvs4400n 2

cisco wrvs4400n 1.0

cisco wrvs4400n_software 1.3.2.0

cisco wrvs4400n_software 1.3.0.5

cisco wrvs4400n_software 2.0.0.3

cisco wrvs4400n_software 1.3.1.0

Vendor Advisories

Cisco RVS4000 4-port Gigabit Security Routers and Cisco WRVS4400N Wireless-N Gigabit Security Routers have several web interface vulnerabilities that can be exploited by a remote, unauthenticated user Cisco has released software updates that address these vulnerabilities Workarounds that mitigate these vulnerabilities are available This advisor ...