VULNERABILITY INTELLIGENCE

CVE-2011-1646

CVSS score9 HIGH
EPSS probability1.90%
CISA KEVNot currently listed
Published2011-05-31
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote authenticated users to execute arbitrary commands via the (1) ping test parameter or (2) traceroute test parameter, aka Bug ID CSCtn23871.

Weakness classification

  • CWE-94: Improper Control of Generation of Code ('Code Injection')

Primary references