Lucene search

[email protected]CVE-2011-1645

HistoryMay 31, 2011 - 8:55 p.m.

CVE-2011-1645

2011-05-3120:55:02

CWE-16

[email protected]

web.nvd.nist.gov

cisco

rvs4000

wrvs4400n

gigabit

security router

vulnerability

cisco cve

configuration file

remote attack

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.5 High

AI Score

Confidence

Low

0.023 Low

EPSS

Percentile

89.7%

JSON

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.

Affected configurations

NVD

Node

ciscorvs4000Match1

ciscorvs4000Match2

AND

ciscorvs4000_softwareMatch1.3.0.5

ciscorvs4000_softwareMatch1.3.1.0

ciscorvs4000_softwareMatch1.3.2.0

ciscorvs4000_softwareMatch2.0.0.3

Node

ciscowrvs4400nMatch1.0

ciscowrvs4400nMatch1.1

ciscowrvs4400nMatch2

AND

ciscowrvs4400n_softwareMatch1.3.0.5

ciscowrvs4400n_softwareMatch1.3.1.0

ciscowrvs4400n_softwareMatch1.3.2.0

ciscowrvs4400n_softwareMatch2.0.0.3

CPENameOperatorVersion
cisco:rvs4000cisco rvs4000eq1
cisco:rvs4000cisco rvs4000eq2
cisco:rvs4000_softwarecisco rvs4000 softwareeq1.3.0.5
cisco:rvs4000_softwarecisco rvs4000 softwareeq1.3.1.0
cisco:rvs4000_softwarecisco rvs4000 softwareeq1.3.2.0
cisco:rvs4000_softwarecisco rvs4000 softwareeq2.0.0.3

CPE	Name	Operator	Version
cisco:rvs4000	cisco rvs4000	eq	1
cisco:rvs4000	cisco rvs4000	eq	2
cisco:rvs4000_software	cisco rvs4000 software	eq	1.3.0.5
cisco:rvs4000_software	cisco rvs4000 software	eq	1.3.1.0
cisco:rvs4000_software	cisco rvs4000 software	eq	1.3.2.0
cisco:rvs4000_software	cisco rvs4000 software	eq	2.0.0.3