PT-2011-3263 · Cisco · Cisco Wrvs4400N Gigabit Security Router+1

Published 2011-05-31 · Updated 2011-09-07 · CVE-2011-1647

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Cisco RVS4000 Gigabit Security Router versions 1.x through 1.3.3.3 Cisco RVS4000 Gigabit Security Router versions 2.x through 2.0.2.6 Cisco WRVS4400N Gigabit Security Router versions prior to 2.0.2.1

Description The issue allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors.

Recommendations For Cisco RVS4000 Gigabit Security Router versions 1.x through 1.3.3.3, update to version 1.3.3.4 or later. For Cisco RVS4000 Gigabit Security Router versions 2.x through 2.0.2.6, update to version 2.0.2.7 or later. For Cisco WRVS4400N Gigabit Security Router versions prior to 2.0.2.1, update to version 2.0.2.1 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-1647

Affected Products

Cisco Rvs4000 Gigabit Security Router

Cisco Wrvs4400N Gigabit Security Router

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2011-1647 · Security Note
• http://cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml · Vendor Advisory
• http://securityfocus.com/bid/47985 · Note
• http://securitytracker.com/id?1025565 · Note