CVE-2011-1645
First published: Tue May 31 2011(Updated: )
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco RVS4000 Firmware | =1 | |
| Cisco RVS4000 Firmware | =2 | |
| Cisco RVS4000 | =1.3.0.5 | |
| Cisco RVS4000 | =1.3.1.0 | |
| Cisco RVS4000 | =1.3.2.0 | |
| Cisco RVS4000 | =2.0.0.3 | |
| Cisco WRVS4400N Wireless-N Gigabit Security Router | =1.0 | |
| Cisco WRVS4400N Wireless-N Gigabit Security Router | =1.1 | |
| Cisco WRVS4400N Wireless-N Gigabit Security Router | =2 | |
| Cisco WRVS4400N | =1.3.0.5 | |
| Cisco WRVS4400N | =1.3.1.0 | |
| Cisco WRVS4400N | =1.3.2.0 | |
| Cisco WRVS4400N | =2.0.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1645?
CVE-2011-1645 has a high severity rating due to its potential for remote code execution.
How do I fix CVE-2011-1645?
To fix CVE-2011-1645, upgrade your firmware to a version above 1.3.3.4 for RVS4000 or 2.0.2.1 for WRVS4400N.
What devices are impacted by CVE-2011-1645?
CVE-2011-1645 affects the Cisco RVS4000 and WRVS4400N routers with specific firmware versions.
Can CVE-2011-1645 be exploited remotely?
Yes, CVE-2011-1645 can be exploited remotely by attackers to access sensitive configuration files.
Is there a workaround for CVE-2011-1645?
While upgrading is the recommended solution, limiting access to the router interface can serve as a temporary workaround for CVE-2011-1645.
- collector/nvd-historical
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/first-publish-date
- agent/event
- agent/description
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/cisco rvs4000 firmware
- version/cisco rvs4000 firmware/1
- version/cisco rvs4000 firmware/2
- canonical/cisco rvs4000
- version/cisco rvs4000/1.3.0.5
- version/cisco rvs4000/1.3.1.0
- version/cisco rvs4000/1.3.2.0
- version/cisco rvs4000/2.0.0.3
- canonical/cisco wrvs4400n wireless-n gigabit security router
- version/cisco wrvs4400n wireless-n gigabit security router/1.0
- version/cisco wrvs4400n wireless-n gigabit security router/1.1
- version/cisco wrvs4400n wireless-n gigabit security router/2
- canonical/cisco wrvs4400n
- version/cisco wrvs4400n/1.3.0.5
- version/cisco wrvs4400n/1.3.1.0
- version/cisco wrvs4400n/1.3.2.0
- version/cisco wrvs4400n/2.0.0.3