Sign-up

ID

VAR-201105-0191


CVE

CVE-2011-1646


TITLE

Cisco RVS4000 Gigabit Security Router Software and WRVS4400N Gigabit Security Router Software vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2011-003135

DESCRIPTION

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871. The Cisco RVS4000/WRVS4400N is a Gigabit Cisco router. The Cisco RVS4000/WRVS4400N has a root command arbitrary command injection vulnerability. This issue is being tracked by Cisco bug ID CSCtn23871. ---------------------------------------------------------------------- Alerts when vulnerabilities pose a threat to your infrastructure The enhanced reporting module of the Secunia Vulnerability Intelligence Manager (VIM) enables you to combine advisory and ticket information, and generate policy compliance statistics. Using your asset list preferences, customised notifications are issued as soon as a new vulnerability is discovered - a valuable tool for documenting mitigation strategies. Watch our quick solution overview: http://www.youtube.com/user/Secunia#p/a/u/0/M1Y9sJqR2SY ---------------------------------------------------------------------- TITLE: Cisco RVS4000 / WRVS4400N Gigabit Security Routers Multiple Vulnerabilities SECUNIA ADVISORY ID: SA44724 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/44724/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=44724 RELEASE DATE: 2011-05-26 DISCUSS ADVISORY: http://secunia.com/advisories/44724/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/44724/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=44724 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Some vulnerabilities have been reported in Cisco RVS4000 and WRVS4400N Gigabit Security Routers, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to disclose sensitive information. 1) The web management interface does not properly restrict access to the backup configuration file, which can be exploited to download the file and disclose sensitive information. 2) Input passed via the "ping" or "traceroute" parameters to the web management interface is not properly sanitised before being used. This can be exploited to inject and execute arbitrary shell commands. 3) An unspecified error in the web management interface can be exploited to retrieve the administrator's private and public keys for SSL certificates. Please see the vendor's advisory for the list of affected products. SOLUTION: Apply updates when available (Scheduled for June 19, 2011). Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ PROVIDED AND/OR DISCOVERED BY: The vendor credits Michal Sajdak, Securitum. ORIGINAL ADVISORY: Cisco: http://www.cisco.com/warp/public/707/cisco-sa-20110525-rvs4000.shtml OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.61

sources: NVD: CVE-2011-1646 // JVNDB: JVNDB-2011-003135 // CNVD: CNVD-2011-1989 // BID: 47984 // VULHUB: VHN-49591 // PACKETSTORM: 101726

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2011-1989

AFFECTED PRODUCTS

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:1.0

Trust: 1.7

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:1.1

Trust: 1.7

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:2

Trust: 1.7

vendor:ciscomodel:wrvs4400nscope:eqversion:1.1

Trust: 1.6

vendor:ciscomodel:rvs4000scope:eqversion:1

Trust: 1.6

vendor:ciscomodel:wrvs4400nscope:eqversion:2

Trust: 1.6

vendor:ciscomodel:rvs4000scope:eqversion:2

Trust: 1.6

vendor:ciscomodel:wrvs4400nscope:eqversion:1.0

Trust: 1.6

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.1.0

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.2.0

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:2.0.0.3

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:2.0.0.3

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.0.5

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.0.5

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.1.0

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.2.0

Trust: 1.0

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1.3.0.3

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:2

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1.3.2.0

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1 2

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:ltversion:1.x

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:eqversion:2.0.2.7

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:ltversion:2.x

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:eqversion:1.3.3.4

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:0

Trust: 0.3

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:neversion:2.0.2.1

Trust: 0.3

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:neversion:2.0.2.7

Trust: 0.3

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:neversion:1.3.3.5

Trust: 0.3

sources: CNVD: CNVD-2011-1989 // BID: 47984 // JVNDB: JVNDB-2011-003135 // CNNVD: CNNVD-201105-269 // NVD: CVE-2011-1646

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-1646
value: HIGH

Trust: 1.0

NVD: CVE-2011-1646
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201105-269
value: CRITICAL

Trust: 0.6

VULHUB: VHN-49591
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2011-1646
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-49591
severity: HIGH
baseScore: 9.0
vectorString: AV:N/AC:L/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: LOW
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.0
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-49591 // JVNDB: JVNDB-2011-003135 // CNNVD: CNNVD-201105-269 // NVD: CVE-2011-1646

PROBLEMTYPE DATA

problemtype:CWE-94

Trust: 1.9

sources: VULHUB: VHN-49591 // JVNDB: JVNDB-2011-003135 // NVD: CVE-2011-1646

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201105-269

TYPE

code injection

Trust: 0.6

sources: CNNVD: CNNVD-201105-269

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-003135

PATCH
title:cisco-sa-20110525-rvs4000url:http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml
Trust: 0.8
title:Cisco RVS4000/WRVS4400N Web Management Interface Command Injection Vulnerability Patchurl:https://www.cnvd.org.cn/patchInfo/show/3954
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2011-1989 // 
            
            
            
            JVNDB: JVNDB-2011-003135

EXTERNAL IDS
db:NVDid:CVE-2011-1646
Trust: 3.4
db:SECTRACKid:1025565
Trust: 1.1
db:BIDid:47984
Trust: 1.0
db:JVNDBid:JVNDB-2011-003135
Trust: 0.8
db:CNNVDid:CNNVD-201105-269
Trust: 0.7
db:SECUNIAid:44724
Trust: 0.7
db:CNVDid:CNVD-2011-1989
Trust: 0.6
db:CISCOid:20110525 CISCO RVS4000 AND WRVS4400N WEB MANAGEMENT INTERFACE VULNERABILITIES
Trust: 0.6
db:NSFOCUSid:16879
Trust: 0.6
db:NSFOCUSid:16886
Trust: 0.6
db:NSFOCUSid:16887
Trust: 0.6
db:VULHUBid:VHN-49591
Trust: 0.1
db:PACKETSTORMid:101726
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-1989 // 
            
            
            
            VULHUB: VHN-49591 // 
            
            
            
            BID: 47984 // 
            
            
            
            JVNDB: JVNDB-2011-003135 // 
            
            
            
            PACKETSTORM: 101726 // 
            
            
            
            CNNVD: CNNVD-201105-269 // 
            
            
            
            NVD: CVE-2011-1646

REFERENCES
url:http://www.cisco.com/en/us/products/products_security_advisory09186a0080b7f190.shtml
Trust: 2.6
url:http://www.securitytracker.com/id?1025565
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1646
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-1646
Trust: 0.8
url:http://www.securityfocus.com/bid/47984
Trust: 0.6
url:http://secunia.com/advisories/44724
Trust: 0.6
url:http://www.nsfocus.net/vulndb/16879
Trust: 0.6
url:http://www.nsfocus.net/vulndb/16887
Trust: 0.6
url:http://www.nsfocus.net/vulndb/16886
Trust: 0.6
url:http://www.cisco.com/
Trust: 0.3
url:/archive/1/518128
Trust: 0.3
url:http://secunia.com/products/corporate/evm/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/44724/#comments
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=44724
Trust: 0.1
url:http://www.youtube.com/user/secunia#p/a/u/0/m1y9sjqr2sy
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/advisories/44724/
Trust: 0.1
url:http://www.cisco.com/warp/public/707/cisco-sa-20110525-rvs4000.shtml
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-1989 // 
            
            
            
            VULHUB: VHN-49591 // 
            
            
            
            BID: 47984 // 
            
            
            
            JVNDB: JVNDB-2011-003135 // 
            
            
            
            PACKETSTORM: 101726 // 
            
            
            
            CNNVD: CNNVD-201105-269 // 
            
            
            
            NVD: CVE-2011-1646

CREDITS
Michal Sajdak of Securitum
Trust: 0.9
sources:
            
            
            BID: 47984 // 
            
            
            
            CNNVD: CNNVD-201105-269

SOURCES
db:CNVDid:CNVD-2011-1989
db:VULHUBid:VHN-49591
db:BIDid:47984
db:JVNDBid:JVNDB-2011-003135
db:PACKETSTORMid:101726
db:CNNVDid:CNNVD-201105-269
db:NVDid:CVE-2011-1646

LAST UPDATE DATE
2024-08-14T13:37:02.618000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2011-1989date:2011-05-26T00:00:00
db:VULHUBid:VHN-49591date:2011-09-07T00:00:00
db:BIDid:47984date:2011-06-17T17:50:00
db:JVNDBid:JVNDB-2011-003135date:2011-12-01T00:00:00
db:CNNVDid:CNNVD-201105-269date:2011-06-01T00:00:00
db:NVDid:CVE-2011-1646date:2011-09-07T03:16:18.550

SOURCES RELEASE DATE
db:CNVDid:CNVD-2011-1989date:2011-05-26T00:00:00
db:VULHUBid:VHN-49591date:2011-05-31T00:00:00
db:BIDid:47984date:2011-05-25T00:00:00
db:JVNDBid:JVNDB-2011-003135date:2011-12-01T00:00:00
db:PACKETSTORMid:101726date:2011-05-27T05:27:22
db:CNNVDid:CNNVD-201105-269date:1900-01-01T00:00:00
db:NVDid:CVE-2011-1646date:2011-05-31T20:55:02.780