9
CVSSv2

CVE-2011-1646

Published: 31/05/2011 Updated: 07/09/2011
CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8
VMScore: 801
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Vulnerability Summary

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x prior to 1.3.3.4 and 2.x prior to 2.0.2.7, and the WRVS4400N Gigabit Security Router with software prior to 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco rvs4000 1

cisco rvs4000 2

cisco rvs4000_software 2.0.0.3

cisco rvs4000_software 1.3.2.0

cisco rvs4000_software 1.3.1.0

cisco rvs4000_software 1.3.0.5

cisco wrvs4400n 1.1

cisco wrvs4400n 2

cisco wrvs4400n 1.0

cisco wrvs4400n_software 1.3.2.0

cisco wrvs4400n_software 1.3.0.5

cisco wrvs4400n_software 1.3.1.0

cisco wrvs4400n_software 2.0.0.3

Vendor Advisories

Cisco RVS4000 4-port Gigabit Security Routers and Cisco WRVS4400N Wireless-N Gigabit Security Routers have several web interface vulnerabilities that can be exploited by a remote, unauthenticated user Cisco has released software updates that address these vulnerabilities Workarounds that mitigate these vulnerabilities are available This advisor ...