Sign-up

ID

VAR-201105-0192


CVE

CVE-2011-1647


TITLE

Cisco RVS4000 Gigabit Security Router Software and WRVS4400N Gigabit Security Router Software vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2011-003136

DESCRIPTION

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871. The problem is Bug ID CSCtn23871 It is a problem.By a third party admin SSL The private key of the certificate may be read. The Cisco RVS4000/WRVS4400N is a Gigabit Cisco router. There is an information leakage problem in the Cisco RVS4000/WRVS4400N. Remote unauthenticated users can exploit the vulnerability to obtain the SSL certificate private/shared key of the Quick VPN. Cisco RVS4000 and WRVS4400N are prone to an information-disclosure vulnerability that affects the web-management interface. Cisco RVS4000\WRVS4400N gigabit security routers can provide network access and switching functions at broadband speeds, thereby helping employees of small and medium-sized enterprises access the work resources they need safely. ---------------------------------------------------------------------- Alerts when vulnerabilities pose a threat to your infrastructure The enhanced reporting module of the Secunia Vulnerability Intelligence Manager (VIM) enables you to combine advisory and ticket information, and generate policy compliance statistics. Using your asset list preferences, customised notifications are issued as soon as a new vulnerability is discovered - a valuable tool for documenting mitigation strategies. Watch our quick solution overview: http://www.youtube.com/user/Secunia#p/a/u/0/M1Y9sJqR2SY ---------------------------------------------------------------------- TITLE: Cisco RVS4000 / WRVS4400N Gigabit Security Routers Multiple Vulnerabilities SECUNIA ADVISORY ID: SA44724 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/44724/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=44724 RELEASE DATE: 2011-05-26 DISCUSS ADVISORY: http://secunia.com/advisories/44724/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/44724/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=44724 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: Some vulnerabilities have been reported in Cisco RVS4000 and WRVS4400N Gigabit Security Routers, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to disclose sensitive information. 1) The web management interface does not properly restrict access to the backup configuration file, which can be exploited to download the file and disclose sensitive information. 2) Input passed via the "ping" or "traceroute" parameters to the web management interface is not properly sanitised before being used. This can be exploited to inject and execute arbitrary shell commands. Please see the vendor's advisory for the list of affected products. SOLUTION: Apply updates when available (Scheduled for June 19, 2011). Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ PROVIDED AND/OR DISCOVERED BY: The vendor credits Michal Sajdak, Securitum. ORIGINAL ADVISORY: Cisco: http://www.cisco.com/warp/public/707/cisco-sa-20110525-rvs4000.shtml OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.61

sources: NVD: CVE-2011-1647 // JVNDB: JVNDB-2011-003136 // CNVD: CNVD-2011-1990 // BID: 47985 // VULHUB: VHN-49592 // PACKETSTORM: 101726

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2011-1990

AFFECTED PRODUCTS

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:1.0

Trust: 1.7

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:1.1

Trust: 1.7

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:eqversion:2

Trust: 1.7

vendor:ciscomodel:wrvs4400nscope:eqversion:1.1

Trust: 1.6

vendor:ciscomodel:rvs4000scope:eqversion:1

Trust: 1.6

vendor:ciscomodel:wrvs4400nscope:eqversion:2

Trust: 1.6

vendor:ciscomodel:rvs4000scope:eqversion:2

Trust: 1.6

vendor:ciscomodel:wrvs4400nscope:eqversion:1.0

Trust: 1.6

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.0.5

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.0.5

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.1.0

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.2.0

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:1.3.2.0

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:2.0.0.3

Trust: 1.0

vendor:ciscomodel:wrvs4400n softwarescope:eqversion:2.0.0.3

Trust: 1.0

vendor:ciscomodel:rvs4000 softwarescope:eqversion:1.3.1.0

Trust: 1.0

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1.3.0.3

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:2

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1.3.2.0

Trust: 0.9

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:1 2

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:ltversion:1.x

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:eqversion:2.0.2.7

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:ltversion:2.x

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security router softwarescope:eqversion:1.3.3.4

Trust: 0.8

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:eqversion:0

Trust: 0.3

vendor:ciscomodel:wrvs4400n wireless-n gigabit security routerscope:neversion:2.0.2.1

Trust: 0.3

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:neversion:2.0.2.7

Trust: 0.3

vendor:ciscomodel:rvs4000 4-port gigabit security routerscope:neversion:1.3.3.5

Trust: 0.3

sources: CNVD: CNVD-2011-1990 // BID: 47985 // JVNDB: JVNDB-2011-003136 // CNNVD: CNNVD-201105-296 // NVD: CVE-2011-1647

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2011-1647
value: MEDIUM

Trust: 1.0

NVD: CVE-2011-1647
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-201105-296
value: MEDIUM

Trust: 0.6

VULHUB: VHN-49592
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2011-1647
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-49592
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-49592 // JVNDB: JVNDB-2011-003136 // CNNVD: CNNVD-201105-296 // NVD: CVE-2011-1647

PROBLEMTYPE DATA

problemtype:CWE-200

Trust: 1.9

sources: VULHUB: VHN-49592 // JVNDB: JVNDB-2011-003136 // NVD: CVE-2011-1647

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201105-296

TYPE

information disclosure

Trust: 0.6

sources: CNNVD: CNNVD-201105-296

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2011-003136

PATCH
title:cisco-sa-20110525-rvs4000url:http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml
Trust: 0.8
title:Cisco RVS4000/WRVS4400N Web Management Interface Private/Common Key Information Disclosure Vulnerability Patchurl:https://www.cnvd.org.cn/patchInfo/show/3955
Trust: 0.6
sources:
            
            
            CNVD: CNVD-2011-1990 // 
            
            
            
            JVNDB: JVNDB-2011-003136

EXTERNAL IDS
db:NVDid:CVE-2011-1647
Trust: 3.4
db:BIDid:47985
Trust: 1.4
db:SECTRACKid:1025565
Trust: 1.1
db:JVNDBid:JVNDB-2011-003136
Trust: 0.8
db:CNNVDid:CNNVD-201105-296
Trust: 0.7
db:SECUNIAid:44724
Trust: 0.7
db:CNVDid:CNVD-2011-1990
Trust: 0.6
db:CISCOid:20110525 CISCO RVS4000 AND WRVS4400N WEB MANAGEMENT INTERFACE VULNERABILITIES
Trust: 0.6
db:VULHUBid:VHN-49592
Trust: 0.1
db:PACKETSTORMid:101726
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-1990 // 
            
            
            
            VULHUB: VHN-49592 // 
            
            
            
            BID: 47985 // 
            
            
            
            JVNDB: JVNDB-2011-003136 // 
            
            
            
            PACKETSTORM: 101726 // 
            
            
            
            CNNVD: CNNVD-201105-296 // 
            
            
            
            NVD: CVE-2011-1647

REFERENCES
url:http://www.cisco.com/en/us/products/products_security_advisory09186a0080b7f190.shtml
Trust: 2.6
url:http://www.securityfocus.com/bid/47985
Trust: 1.1
url:http://www.securitytracker.com/id?1025565
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-1647
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-1647
Trust: 0.8
url:http://secunia.com/advisories/44724
Trust: 0.6
url:http://www.cisco.com/
Trust: 0.3
url:/archive/1/518128
Trust: 0.3
url:http://secunia.com/products/corporate/evm/
Trust: 0.1
url:http://secunia.com/advisories/secunia_security_advisories/
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/
Trust: 0.1
url:http://secunia.com/advisories/44724/#comments
Trust: 0.1
url:https://ca.secunia.com/?page=viewadvisory&vuln_id=44724
Trust: 0.1
url:http://www.youtube.com/user/secunia#p/a/u/0/m1y9sjqr2sy
Trust: 0.1
url:http://secunia.com/vulnerability_scanning/personal/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/advisories/44724/
Trust: 0.1
url:http://www.cisco.com/warp/public/707/cisco-sa-20110525-rvs4000.shtml
Trust: 0.1
url:http://secunia.com/advisories/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            CNVD: CNVD-2011-1990 // 
            
            
            
            VULHUB: VHN-49592 // 
            
            
            
            BID: 47985 // 
            
            
            
            JVNDB: JVNDB-2011-003136 // 
            
            
            
            PACKETSTORM: 101726 // 
            
            
            
            CNNVD: CNNVD-201105-296 // 
            
            
            
            NVD: CVE-2011-1647

CREDITS
Cisco
Trust: 0.3
sources:
            
            
            BID: 47985

SOURCES
db:CNVDid:CNVD-2011-1990
db:VULHUBid:VHN-49592
db:BIDid:47985
db:JVNDBid:JVNDB-2011-003136
db:PACKETSTORMid:101726
db:CNNVDid:CNNVD-201105-296
db:NVDid:CVE-2011-1647

LAST UPDATE DATE
2024-11-23T22:42:51.156000+00:00

SOURCES UPDATE DATE
db:CNVDid:CNVD-2011-1990date:2011-05-26T00:00:00
db:VULHUBid:VHN-49592date:2011-09-07T00:00:00
db:BIDid:47985date:2011-06-17T17:50:00
db:JVNDBid:JVNDB-2011-003136date:2011-12-01T00:00:00
db:CNNVDid:CNNVD-201105-296date:2011-06-01T00:00:00
db:NVDid:CVE-2011-1647date:2024-11-21T01:26:43.053

SOURCES RELEASE DATE
db:CNVDid:CNVD-2011-1990date:2011-05-26T00:00:00
db:VULHUBid:VHN-49592date:2011-05-31T00:00:00
db:BIDid:47985date:2011-05-25T00:00:00
db:JVNDBid:JVNDB-2011-003136date:2011-12-01T00:00:00
db:PACKETSTORMid:101726date:2011-05-27T05:27:22
db:CNNVDid:CNNVD-201105-296date:2011-05-31T00:00:00
db:NVDid:CVE-2011-1647date:2011-05-31T20:55:02.827