CVE-2011-1645
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.40%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 3.40% probability · 88th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-16
- Affected
- cisco/rvs4000 · cisco/rvs4000 software · cisco/wrvs4400n · cisco/wrvs4400n software
- Source
- psirt@cisco.com
References
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtmlVendor Advisory
- http://www.securityfocus.com/bid/47988
- http://www.securitytracker.com/id?1025565
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtmlVendor Advisory
- http://www.securityfocus.com/bid/47988
- http://www.securitytracker.com/id?1025565
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.