CVE-2011-1645: Critical severity cisco rvs4000 firmware vulnerability
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1645?
CVE-2011-1645 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2011-1645?
To fix CVE-2011-1645, upgrade your firmware to a version above 1.3.3.4 for RVS4000 or 2.0.2.1 for WRVS4400N.
What devices are impacted by CVE-2011-1645?
CVE-2011-1645 affects the Cisco RVS4000 and WRVS4400N routers with specific firmware versions.
Can CVE-2011-1645 be exploited remotely?
Yes, CVE-2011-1645 can be exploited remotely by attackers to access sensitive configuration files.
Is there a workaround for CVE-2011-1645?
While upgrading is the recommended solution, limiting access to the router interface can serve as a temporary workaround for CVE-2011-1645.