PT-2011-3262 · Cisco · Cisco Wrvs4400N Gigabit Security Router+1

Published 2011-05-31 · Updated 2011-09-07 · CVE-2011-1646

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco RVS4000 Gigabit Security Router versions 1.x before 1.3.3.4 Cisco RVS4000 Gigabit Security Router versions 2.x before 2.0.2.7 Cisco WRVS4400N Gigabit Security Router versions before 2.0.2.1

Description The issue allows remote authenticated users to execute arbitrary commands via the ping test parameter or traceroute test parameter in the web management interface.

Recommendations For Cisco RVS4000 Gigabit Security Router versions 1.x before 1.3.3.4, update to version 1.3.3.4 or later. For Cisco RVS4000 Gigabit Security Router versions 2.x before 2.0.2.7, update to version 2.0.2.7 or later. For Cisco WRVS4400N Gigabit Security Router versions before 2.0.2.1, update to version 2.0.2.1 or later.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2011-1646

Affected Products

Cisco Rvs4000 Gigabit Security Router

Cisco Wrvs4400N Gigabit Security Router

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2011-1646 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml · Vendor Advisory
• http://securitytracker.com/id?1025565 · Note