CVE-2011-1645
Severity CVSS v4.0:
Pending analysis
Type:
CWE-16
Configuration Errors
Publication date:
31/05/2011
Last modified:
07/09/2011
Description
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.
Impact
Base Score 2.0
9.30
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:h:cisco:rvs4000:1:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:rvs4000:2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:1.3.0.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:1.3.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:1.3.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:2.0.0.3:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:wrvs4400n:1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:wrvs4400n:1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:wrvs4400n:2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:1.3.0.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:1.3.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:1.3.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:2.0.0.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page