Sign-up

ID

VAR-201105-0190


CVE

CVE-2011-1645


TITLE

Cisco RVS4000/WRVS4400N Web Management Interface Information Disclosure Vulnerability

Trust: 0.9

sources: CNVD: CNVD-2011-1988 // BID: 47988

DESCRIPTION

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871. The problem is Bug ID CSCtn23871 It is a problem.A third party may read the backup configuration file and, as a result, execute arbitrary code. The Cisco RVS4000/WRVS4400N is a Gigabit Cisco router. If the administrator of the device previously created a configuration backup using Administration --> Backup & Restore --> Backup, the remote unauthenticated user can access the backup configuration file, which includes all device configuration parameters, including HTTP authentication password and VPN shared key. (PSKs). Cisco RVS4000 and WRVS4400N routers are prone to an information-disclosure vulnerability. An attacker can exploit this issue to obtain potentially sensitive information. This may aid in further attacks. This issue is being tracked by Cisco bug ID CSCtn23871. ---------------------------------------------------------------------- Alerts when vulnerabilities pose a threat to your infrastructure The enhanced reporting module of the Secunia Vulnerability Intelligence Manager (VIM) enables you to combine advisory and ticket information, and generate policy compliance statistics. Using your asset list preferences, customised notifications are issued as soon as a new vulnerability is discovered - a valuable tool for documenting mitigation strategies. Watch our quick solution overview: http://www.youtube.com/user/Secunia#p/a/u/0/M1Y9sJqR2SY ---------------------------------------------------------------------- TITLE: Cisco RVS4000 / WRVS4400N Gigabit Security Routers Multiple Vulnerabilities SECUNIA ADVISORY ID: SA44724 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/44724/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=44724 RELEASE DATE: 2011-05-26 DISCUSS ADVISORY: http://secunia.com/advisories/44724/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/44724/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=44724 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Some vulnerabilities have been reported in Cisco RVS4000 and WRVS4400N Gigabit Security Routers, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to disclose sensitive information. 1) The web management interface does not properly restrict access to the backup configuration file, which can be exploited to download the file and disclose sensitive information. 2) Input passed via the "ping" or "traceroute" parameters to the web management interface is not properly sanitised before being used. This can be exploited to inject and execute arbitrary shell commands. 3) An unspecified error in the web management interface can be exploited to retrieve the administrator's private and public keys for SSL certificates. Please see the vendor's advisory for the list of affected products. SOLUTION: Apply updates when available (Scheduled for June 19, 2011). Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ PROVIDED AND/OR DISCOVERED BY: The vendor credits Michal Sajdak, Securitum. ORIGINAL ADVISORY: Cisco: http://www.cisco.com/warp/public/707/cisco-sa-20110525-rvs4000.shtml OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.61

sources: NVD: CVE-2011-1645 // JVNDB: JVNDB-2011-003134 // CNVD: CNVD-2011-1988 // BID: 47988 // VULHUB: VHN-49590 // PACKETSTORM: 101726

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2011-1988

AFFECTED PRODUCTS

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:1.0

Trust: 1.7

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:1.1

Trust: 1.7

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:2

Trust: 1.7

vendor:ciscomodel:wrvs4400nscope:eqversion:1.1

Trust: 1.6

vendor:ciscomodel:rvs4000scope:eqversion:1

Trust: 1.6

vendor:ciscomodel:wrvs4400nscope:eqversion:2

Trust: 1.6

vendor:ciscomodel:rvs4000scope:eqversion:2

Trust: 1.6

vendor:ciscomodel:wrvs4400nscope:eqversion:1.0

Trust: 1.6

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.1.0

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.2.0

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:2.0.0.3

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:2.0.0.3

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.0.5

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.0.5

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.1.0

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.2.0

Trust: 1.0

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1.3.0.3

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:2

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1.3.2.0

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1 2

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:ltversion:1.x

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:eqversion:2.0.2.7

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:ltversion:2.x

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:eqversion:1.3.3.4

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:0

Trust: 0.3

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:neversion:2.0.2.1

Trust: 0.3

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:neversion:2.0.2.7

Trust: 0.3

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:neversion:1.3.3.5

Trust: 0.3

sources: CNVD: CNVD-2011-1988 // BID: 47988 // JVNDB: JVNDB-2011-003134 // CNNVD: CNNVD-201105-272 // NVD: CVE-2011-1645

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-1645
value: HIGH

Trust: 1.0

NVD: CVE-2011-1645
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201105-272
value: CRITICAL

Trust: 0.6

VULHUB: VHN-49590
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2011-1645
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-49590
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-49590 // JVNDB: JVNDB-2011-003134 // CNNVD: CNNVD-201105-272 // NVD: CVE-2011-1645

PROBLEMTYPE DATA

problemtype:CWE-16

Trust: 1.9

sources: VULHUB: VHN-49590 // JVNDB: JVNDB-2011-003134 // NVD: CVE-2011-1645

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201105-272

TYPE

configuration error

Trust: 0.6

sources: CNNVD: CNNVD-201105-272

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-003134

PATCH
title:cisco-sa-20110525-rvs4000url:http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml
Trust: 0.8
title:Cisco RVS4000/WRVS4400N Web Management Interface Information Disclosure Vulnerability Patchurl:https://www.cnvd.org.cn/patchInfo/show/3953
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2011-1988 // 
            
            
            
            JVNDB: JVNDB-2011-003134

EXTERNAL IDS
db:NVDid:CVE-2011-1645
Trust: 3.4
db:BIDid:47988
Trust: 2.0
db:SECTRACKid:1025565
Trust: 1.1
db:JVNDBid:JVNDB-2011-003134
Trust: 0.8
db:CNNVDid:CNNVD-201105-272
Trust: 0.7
db:SECUNIAid:44724
Trust: 0.7
db:CNVDid:CNVD-2011-1988
Trust: 0.6
db:CISCOid:20110525 CISCO RVS4000 AND WRVS4400N WEB MANAGEMENT INTERFACE VULNERABILITIES
Trust: 0.6
db:NSFOCUSid:16886
Trust: 0.6
db:NSFOCUSid:16887
Trust: 0.6
db:VULHUBid:VHN-49590
Trust: 0.1
db:PACKETSTORMid:101726
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-1988 // 
            
            
            
            VULHUB: VHN-49590 // 
            
            
            
            BID: 47988 // 
            
            
            
            JVNDB: JVNDB-2011-003134 // 
            
            
            
            PACKETSTORM: 101726 // 
            
            
            
            CNNVD: CNNVD-201105-272 // 
            
            
            
            NVD: CVE-2011-1645

REFERENCES
url:http://www.cisco.com/en/us/products/products_security_advisory09186a0080b7f190.shtml
Trust: 2.6
url:http://www.securityfocus.com/bid/47988
Trust: 1.7
url:http://www.securitytracker.com/id?1025565
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1645
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-1645
Trust: 0.8
url:http://secunia.com/advisories/44724
Trust: 0.6
url:http://www.nsfocus.net/vulndb/16887
Trust: 0.6
url:http://www.nsfocus.net/vulndb/16886
Trust: 0.6
url:http://www.cisco.com
Trust: 0.3
url:/archive/1/518128
Trust: 0.3
url:http://secunia.com/products/corporate/evm/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/44724/#comments
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=44724
Trust: 0.1
url:http://www.youtube.com/user/secunia#p/a/u/0/m1y9sjqr2sy
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/advisories/44724/
Trust: 0.1
url:http://www.cisco.com/warp/public/707/cisco-sa-20110525-rvs4000.shtml
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-1988 // 
            
            
            
            VULHUB: VHN-49590 // 
            
            
            
            BID: 47988 // 
            
            
            
            JVNDB: JVNDB-2011-003134 // 
            
            
            
            PACKETSTORM: 101726 // 
            
            
            
            CNNVD: CNNVD-201105-272 // 
            
            
            
            NVD: CVE-2011-1645

CREDITS
Michal Sajdak of Securitum
Trust: 0.9
sources:
            
            
            BID: 47988 // 
            
            
            
            CNNVD: CNNVD-201105-272

SOURCES
db:CNVDid:CNVD-2011-1988
db:VULHUBid:VHN-49590
db:BIDid:47988
db:JVNDBid:JVNDB-2011-003134
db:PACKETSTORMid:101726
db:CNNVDid:CNNVD-201105-272
db:NVDid:CVE-2011-1645

LAST UPDATE DATE
2024-08-14T13:37:02.574000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2011-1988date:2011-05-26T00:00:00
db:VULHUBid:VHN-49590date:2011-09-07T00:00:00
db:BIDid:47988date:2011-06-17T17:50:00
db:JVNDBid:JVNDB-2011-003134date:2011-12-01T00:00:00
db:CNNVDid:CNNVD-201105-272date:2011-06-01T00:00:00
db:NVDid:CVE-2011-1645date:2011-09-07T03:16:18.393

SOURCES RELEASE DATE
db:CNVDid:CNVD-2011-1988date:2011-05-26T00:00:00
db:VULHUBid:VHN-49590date:2011-05-31T00:00:00
db:BIDid:47988date:2011-05-25T00:00:00
db:JVNDBid:JVNDB-2011-003134date:2011-12-01T00:00:00
db:PACKETSTORMid:101726date:2011-05-27T05:27:22
db:CNNVDid:CNNVD-201105-272date:1900-01-01T00:00:00
db:NVDid:CVE-2011-1645date:2011-05-31T20:55:02.750