Информационная безопасность
[RU] switch to English


Многочисленные уязвимости безопасности в маршрутизаторах Cisco RVS4000 / Cisco WRVS4400N
Опубликовано:26 мая 2011 г.
Источник:
SecurityVulns ID:11693
Тип:удаленная
Уровень опасности:
6/10
Описание:Выполнение кода, утечка информации через Web-интерфейс.
Затронутые продукты:CISCO : Cisco RVS4000
 CISCO : Cisco WRVS4400N
CVE:CVE-2011-1647 (The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.)
 CVE-2011-1646 (The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.)
 CVE-2011-1645 (The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the backup configuration file, and consequently execute arbitrary code, via unspecified vectors, aka Bug ID CSCtn23871.)
Оригинальный текстdocumentCISCO, Cisco Security Advisory: Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities (26.05.2011)

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород