Executive Summary

Summary
Title Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities
Informations
Name cisco-sa-20110525-rvs4000 First vendor Publication 2011-05-09
Vendor Cisco Last vendor Modification 2011-05-25
Severity (Vendor) N/A Revision 1.0

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score NA
Base Score NA Environmental Score NA
impact SubScore NA Temporal Score NA
Exploitabality Sub Score NA
 
Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score 9.3 Attack Range Network
Cvss Impact Score 10 Attack Complexity Medium
Cvss Expoit Score 8.6 Authentication None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Cisco RVS4000 4-port Gigabit Security Routers and Cisco WRVS4400N Wireless-N Gigabit Security Routers have several web interface vulnerabilities that can be exploited by a remote, unauthenticated user.

Cisco has released free software updates that address these vulnerabilities.

Workarounds that mitigate these vulnerabilities are available.

Original Source

Url : http://www.cisco.com/warp/public/707/cisco-sa-20110525-rvs4000.shtml

CWE : Common Weakness Enumeration

% Id Name
33 % CWE-200 Information Exposure
33 % CWE-94 Failure to Control Generation of Code ('Code Injection')
33 % CWE-16 Configuration

CPE : Common Platform Enumeration

TypeDescriptionCount
Application 4
Application 4
Hardware 2
Hardware 3

Open Source Vulnerability Database (OSVDB)

Id Description
72619 Cisco RVS4000 / WRVS4400N Gigabit Routers Web Management Interface Unauthenti...

72618 Cisco RVS4000 / WRVS4400N Gigabit Routers Web Management Interface Multiple T...

72617 Cisco RVS4000 / WRVS4400N Gigabit Routers Web Management Interface Unauthenti...