CVE-2011-1647
Estado: ModificadaMedia (5)—
The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.17%
- Percentil entre todas las CVEs puntuadas: 66
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-200
Referencias
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml
- http://www.securityfocus.com/bid/47985
- http://www.securitytracker.com/id?1025565
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml
- http://www.securityfocus.com/bid/47985
- http://www.securitytracker.com/id?1025565
JSON original (NVD)
Mostrar
{
"id": "CVE-2011-1647",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "psirt@cisco.com",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2011-05-31T20:55:02.827",
"references": [
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml",
"tags": [
"Vendor Advisory"
],
"source": "psirt@cisco.com"
},
{
"url": "http://www.securityfocus.com/bid/47985",
"source": "psirt@cisco.com"
},
{
"url": "http://www.securitytracker.com/id?1025565",
"source": "psirt@cisco.com"
},
{
"url": "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/47985",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securitytracker.com/id?1025565",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871."
},
{
"lang": "es",
"value": "El interfaz de administración web de Cisco RVS4000 Gigabit Security Router con software 1.x anteriores a 1.3.3.4 y 2.x anteriores a 2.0.2.7, y de WRVS4400N Gigabit Security Router con software anterior a la versión 2.0.2.1 permite a atacantes remotos leer la clave privada del certificado SSL admin a través de vectores sin especificar. También conocido como Bug ID CSCtn23871."
}
],
"lastModified": "2026-06-16T23:29:44.797",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:rvs4000:1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDEB65FB-54C5-4574-9208-F3E3EE823B96"
},
{
"criteria": "cpe:2.3:h:cisco:rvs4000:2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FF7E4042-1F62-4DF7-A624-2F492F792937"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:rvs4000_software:1.3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5363CFAF-439E-488C-9E97-BE04D80A4F9D"
},
{
"criteria": "cpe:2.3:a:cisco:rvs4000_software:1.3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "096FB511-0E5D-46B6-827B-EAB242E015EA"
},
{
"criteria": "cpe:2.3:a:cisco:rvs4000_software:1.3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "567C5658-57F0-4BBA-9849-9A77504102FC"
},
{
"criteria": "cpe:2.3:a:cisco:rvs4000_software:2.0.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2596081A-DFA3-4006-9B7C-EE3A29ED0341"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:cisco:wrvs4400n:1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9D4BF4B-0360-4A3B-8843-1D5E84CA948E"
},
{
"criteria": "cpe:2.3:h:cisco:wrvs4400n:1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C01433D-F43E-4574-BC04-1F0C060BBFC4"
},
{
"criteria": "cpe:2.3:h:cisco:wrvs4400n:2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A3C11E2E-B910-45EC-A8FA-6BAAFFD26ED3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:cisco:wrvs4400n_software:1.3.0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C754BA1B-7DEC-49F4-835F-1EDA9289E19D"
},
{
"criteria": "cpe:2.3:a:cisco:wrvs4400n_software:1.3.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1A0606AC-B349-411A-8D45-213A60FCFD08"
},
{
"criteria": "cpe:2.3:a:cisco:wrvs4400n_software:1.3.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1CE7344-400B-4E2F-B9DF-C2B0BB74B080"
},
{
"criteria": "cpe:2.3:a:cisco:wrvs4400n_software:2.0.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEB82F7E-A77E-400A-B894-3207026826C9"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@cisco.com"
}