CVE-2011-1646
Severity CVSS v4.0:
Pending analysis
Type:
CWE-94
Code Injection
Publication date:
31/05/2011
Last modified:
07/09/2011
Description
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.
Impact
Base Score 2.0
9.00
Severity 2.0
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:h:cisco:rvs4000:1:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:rvs4000:2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:1.3.0.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:1.3.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:1.3.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:rvs4000_software:2.0.0.3:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:wrvs4400n:1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:wrvs4400n:1.1:*:*:*:*:*:*:* | ||
| cpe:2.3:h:cisco:wrvs4400n:2:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:1.3.0.5:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:1.3.1.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:1.3.2.0:*:*:*:*:*:*:* | ||
| cpe:2.3:a:cisco:wrvs4400n_software:2.0.0.3:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page