CVE-2011-1647: Infoleak
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1647?
CVE-2011-1647 has been classified as a high severity vulnerability due to the potential for unauthorized access to the admin SSL certificate.
How do I fix CVE-2011-1647?
To fix CVE-2011-1647, you should upgrade the firmware of your Cisco RVS4000 or WRVS4400N routers to the latest version available that addresses this vulnerability.
What products are affected by CVE-2011-1647?
CVE-2011-1647 affects the Cisco RVS4000 and WRVS4400N routers running specific versions of their firmware.
What type of vulnerability is CVE-2011-1647?
CVE-2011-1647 is a remote code execution vulnerability that allows attackers to read sensitive information such as the SSL certificate's private key.
How can I determine if my Cisco device is vulnerable to CVE-2011-1647?
You can determine if your Cisco device is vulnerable to CVE-2011-1647 by checking the firmware version against the versions listed in the vulnerability description.