PT-2011-3263 · Cisco · Cisco Wrvs4400N Gigabit Security Router+1

Publicado 2011-05-31 · Atualizado 2011-09-07 · CVE-2011-1647

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco RVS4000 Gigabit Security Router versions 1.x through 1.3.3.3 Cisco RVS4000 Gigabit Security Router versions 2.x through 2.0.2.6 Cisco WRVS4400N Gigabit Security Router versions prior to 2.0.2.1

Description The issue allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors.

Recommendations For Cisco RVS4000 Gigabit Security Router versions 1.x through 1.3.3.3, update to version 1.3.3.4 or later. For Cisco RVS4000 Gigabit Security Router versions 2.x through 2.0.2.6, update to version 2.0.2.7 or later. For Cisco WRVS4400N Gigabit Security Router versions prior to 2.0.2.1, update to version 2.0.2.1 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-1647

Produtos afetados

Cisco Rvs4000 Gigabit Security Router

Cisco Wrvs4400N Gigabit Security Router

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-1647 · Nota de Segurança
• http://cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml · Aviso do Fabricante
• http://securityfocus.com/bid/47985 · Nota
• http://securitytracker.com/id?1025565 · Nota