PT-2011-3261 · Cisco · Cisco Wrvs4400N Gigabit Security Router+1

Publicado 2011-05-31 · Atualizado 2011-09-07 · CVE-2011-1645

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco RVS4000 Gigabit Security Router versions 1.x through 1.3.3.3 Cisco RVS4000 Gigabit Security Router versions 2.x through 2.0.2.6 Cisco WRVS4400N Gigabit Security Router versions prior to 2.0.2.1

Description The web management interface allows remote attackers to read the backup configuration file and execute arbitrary code via unspecified vectors.

Recommendations For Cisco RVS4000 Gigabit Security Router versions 1.x through 1.3.3.3, update to version 1.3.3.4 or later. For Cisco RVS4000 Gigabit Security Router versions 2.x through 2.0.2.6, update to version 2.0.2.7 or later. For Cisco WRVS4400N Gigabit Security Router versions prior to 2.0.2.1, update to version 2.0.2.1 or later.

Correção

Enumeração de Fraquezas

CWE-16

Identificadores relacionados

CVE-2011-1645

Produtos afetados

Cisco Rvs4000 Gigabit Security Router

Cisco Wrvs4400N Gigabit Security Router

Referências · 4

• http://securityfocus.com/bid/47988 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1645 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml · Aviso do Fabricante
• http://securitytracker.com/id?1025565 · Nota