CVE-2011-1646
Severity Score
9.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.
El interfaz de administración web de Cisco RVS4000 Gigabit Security Router con software 1.x anteriores a 1.3.3.4 y 2.x anteriores a 2.0.2.7, y de WRVS4400N Gigabit Security Router con software anterior a la versión 2.0.2.1, permite a atacantes remotos autenticados ejecutar comandos de su elección a través de (1) el parámetro ping test o (2) el parámetro traceroute test. También conocido como Bug ID CSCtn23871.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-04-05 CVE Reserved
- 2011-05-31 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-94: Improper Control of Generation of Code ('Code Injection')
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| http://www.securitytracker.com/id?1025565 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml | 2011-09-07 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 1 Search vendor "Cisco" for product "Rvs4000" and version "1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 1.3.0.5 Search vendor "Cisco" for product "Rvs4000 Software" and version "1.3.0.5" | - |
Affected
|
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 1 Search vendor "Cisco" for product "Rvs4000" and version "1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 1.3.1.0 Search vendor "Cisco" for product "Rvs4000 Software" and version "1.3.1.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 1 Search vendor "Cisco" for product "Rvs4000" and version "1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 1.3.2.0 Search vendor "Cisco" for product "Rvs4000 Software" and version "1.3.2.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 1 Search vendor "Cisco" for product "Rvs4000" and version "1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 2.0.0.3 Search vendor "Cisco" for product "Rvs4000 Software" and version "2.0.0.3" | - |
Affected
|
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 2 Search vendor "Cisco" for product "Rvs4000" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 1.3.0.5 Search vendor "Cisco" for product "Rvs4000 Software" and version "1.3.0.5" | - |
Affected
|
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 2 Search vendor "Cisco" for product "Rvs4000" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 1.3.1.0 Search vendor "Cisco" for product "Rvs4000 Software" and version "1.3.1.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 2 Search vendor "Cisco" for product "Rvs4000" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 1.3.2.0 Search vendor "Cisco" for product "Rvs4000 Software" and version "1.3.2.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Rvs4000 Search vendor "Cisco" for product "Rvs4000" | 2 Search vendor "Cisco" for product "Rvs4000" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Rvs4000 Software Search vendor "Cisco" for product "Rvs4000 Software" | 2.0.0.3 Search vendor "Cisco" for product "Rvs4000 Software" and version "2.0.0.3" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.0 Search vendor "Cisco" for product "Wrvs4400n" and version "1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.0.5 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.0.5" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.0 Search vendor "Cisco" for product "Wrvs4400n" and version "1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.1.0 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.1.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.0 Search vendor "Cisco" for product "Wrvs4400n" and version "1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.2.0 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.2.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.0 Search vendor "Cisco" for product "Wrvs4400n" and version "1.0" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 2.0.0.3 Search vendor "Cisco" for product "Wrvs4400n Software" and version "2.0.0.3" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.1 Search vendor "Cisco" for product "Wrvs4400n" and version "1.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.0.5 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.0.5" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.1 Search vendor "Cisco" for product "Wrvs4400n" and version "1.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.1.0 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.1.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.1 Search vendor "Cisco" for product "Wrvs4400n" and version "1.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.2.0 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.2.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 1.1 Search vendor "Cisco" for product "Wrvs4400n" and version "1.1" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 2.0.0.3 Search vendor "Cisco" for product "Wrvs4400n Software" and version "2.0.0.3" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 2 Search vendor "Cisco" for product "Wrvs4400n" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.0.5 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.0.5" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 2 Search vendor "Cisco" for product "Wrvs4400n" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.1.0 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.1.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 2 Search vendor "Cisco" for product "Wrvs4400n" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 1.3.2.0 Search vendor "Cisco" for product "Wrvs4400n Software" and version "1.3.2.0" | - |
Affected
|
| Cisco Search vendor "Cisco" | Wrvs4400n Search vendor "Cisco" for product "Wrvs4400n" | 2 Search vendor "Cisco" for product "Wrvs4400n" and version "2" | - |
Affected
| in | Cisco Search vendor "Cisco" | Wrvs4400n Software Search vendor "Cisco" for product "Wrvs4400n Software" | 2.0.0.3 Search vendor "Cisco" for product "Wrvs4400n Software" and version "2.0.0.3" | - |
Affected
|