5
CVSSv2

CVE-2011-1647

Published: 31/05/2011 Updated: 07/09/2011
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x prior to 1.3.3.4 and 2.x prior to 2.0.2.7, and the WRVS4400N Gigabit Security Router with software prior to 2.0.2.1, allows remote malicious users to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.

Vulnerable Product Search on Vulmon Subscribe to Product

cisco rvs4000 1

cisco rvs4000 2

cisco rvs4000_software 1.3.1.0

cisco rvs4000_software 1.3.0.5

cisco rvs4000_software 2.0.0.3

cisco rvs4000_software 1.3.2.0

cisco wrvs4400n 1.0

cisco wrvs4400n 1.1

cisco wrvs4400n 2

cisco wrvs4400n_software 1.3.1.0

cisco wrvs4400n_software 1.3.2.0

cisco wrvs4400n_software 1.3.0.5

cisco wrvs4400n_software 2.0.0.3

Vendor Advisories

Cisco RVS4000 4-port Gigabit Security Routers and Cisco WRVS4400N Wireless-N Gigabit Security Routers have several web interface vulnerabilities that can be exploited by a remote, unauthenticated user Cisco has released software updates that address these vulnerabilities Workarounds that mitigate these vulnerabilities are available This advisor ...
The firmware of Cisco RVS4000 4-port Gigabit Security Routers and WRVS4400N Wireless-N Gigabit Security Routers contains a vulnerability that could allow an unauthenticated, remote attacker to access sensitive information from a targeted device The vulnerability is due to improper security protections on SSL certificate private keys on affected de ...