CVE-2011-1646: Code Injection
First published: Tue May 31 2011(Updated: )
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Cisco RVS4000 | =1 | |
| Cisco RVS4000 | =2 | |
| Cisco Rvs4000 Software | =1.3.0.5 | |
| Cisco Rvs4000 Software | =1.3.1.0 | |
| Cisco Rvs4000 Software | =1.3.2.0 | |
| Cisco Rvs4000 Software | =2.0.0.3 | |
| Cisco Wrvs4400n | =1.0 | |
| Cisco Wrvs4400n | =1.1 | |
| Cisco Wrvs4400n | =2 | |
| Cisco Wrvs4400n Software | =1.3.0.5 | |
| Cisco Wrvs4400n Software | =1.3.1.0 | |
| Cisco Wrvs4400n Software | =1.3.2.0 | |
| Cisco Wrvs4400n Software | =2.0.0.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/cisco
- canonical/cisco rvs4000
- version/cisco rvs4000/1
- version/cisco rvs4000/2
- canonical/cisco rvs4000 software
- version/cisco rvs4000 software/1.3.0.5
- version/cisco rvs4000 software/1.3.1.0
- version/cisco rvs4000 software/1.3.2.0
- version/cisco rvs4000 software/2.0.0.3
- canonical/cisco wrvs4400n
- version/cisco wrvs4400n/1.0
- version/cisco wrvs4400n/1.1
- version/cisco wrvs4400n/2
- canonical/cisco wrvs4400n software
- version/cisco wrvs4400n software/1.3.0.5
- version/cisco wrvs4400n software/1.3.1.0
- version/cisco wrvs4400n software/1.3.2.0
- version/cisco wrvs4400n software/2.0.0.3