{"api_version":"1","generated_at":"2026-07-24T00:51:00+00:00","cve":"CVE-2011-1647","urls":{"html":"https://cve.report/CVE-2011-1647","api":"https://cve.report/api/cve/CVE-2011-1647.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2011-1647","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2011-1647"},"summary":{"title":"CVE-2011-1647","description":"The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.","state":"PUBLISHED","assigner":"cisco","published_at":"2011-05-31 20:55:02","updated_at":"2026-04-29 01:13:23"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml","name":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Cisco Systems - Redirect to","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/47985","name":"http://www.securityfocus.com/bid/47985","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco RVS4000 and WRVS4400N Web Management Private/Public Key's Information Disclosure Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securitytracker.com/id?1025565","name":"http://www.securitytracker.com/id?1025565","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Cisco Gigabit Security Router Bugs Let Remote Users Obtain Information and Execute Arbitrary Code - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-1647","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-1647","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"rvs4000","cpe6":"1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"rvs4000","cpe6":"2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"rvs4000_software","cpe6":"1.3.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"rvs4000_software","cpe6":"1.3.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"rvs4000_software","cpe6":"1.3.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"rvs4000_software","cpe6":"2.0.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"wrvs4400n","cpe6":"1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"wrvs4400n","cpe6":"1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"h","cpe4":"cisco","cpe5":"wrvs4400n","cpe6":"2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"wrvs4400n_software","cpe6":"1.3.0.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"wrvs4400n_software","cpe6":"1.3.1.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"wrvs4400n_software","cpe6":"1.3.2.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2011","cve_id":"1647","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"cisco","cpe5":"wrvs4400n_software","cpe6":"2.0.0.3","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T22:37:24.877Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"47985","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/47985"},{"name":"20110525 Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO","x_transferred"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml"},{"name":"1025565","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1025565"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2011-05-25T00:00:00.000Z","descriptions":[{"lang":"en","value":"The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2011-09-07T09:00:00.000Z","orgId":"d1c1063e-7a18-46af-9102-31f8928bc633","shortName":"cisco"},"references":[{"name":"47985","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/47985"},{"name":"20110525 Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities","tags":["vendor-advisory","x_refsource_CISCO"],"url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml"},{"name":"1025565","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1025565"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"psirt@cisco.com","ID":"CVE-2011-1647","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"47985","refsource":"BID","url":"http://www.securityfocus.com/bid/47985"},{"name":"20110525 Cisco RVS4000 and WRVS4400N Web Management Interface Vulnerabilities","refsource":"CISCO","url":"http://www.cisco.com/en/US/products/products_security_advisory09186a0080b7f190.shtml"},{"name":"1025565","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1025565"}]}}}},"cveMetadata":{"assignerOrgId":"d1c1063e-7a18-46af-9102-31f8928bc633","assignerShortName":"cisco","cveId":"CVE-2011-1647","datePublished":"2011-05-31T20:00:00.000Z","dateReserved":"2011-04-05T00:00:00.000Z","dateUpdated":"2024-08-06T22:37:24.877Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2011-05-31 20:55:02","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:rvs4000:1:*:*:*:*:*:*:*","matchCriteriaId":"BDEB65FB-54C5-4574-9208-F3E3EE823B96"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:rvs4000:2:*:*:*:*:*:*:*","matchCriteriaId":"FF7E4042-1F62-4DF7-A624-2F492F792937"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:rvs4000_software:1.3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"5363CFAF-439E-488C-9E97-BE04D80A4F9D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:rvs4000_software:1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"096FB511-0E5D-46B6-827B-EAB242E015EA"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:rvs4000_software:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"567C5658-57F0-4BBA-9849-9A77504102FC"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:rvs4000_software:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"2596081A-DFA3-4006-9B7C-EE3A29ED0341"}]}]},{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wrvs4400n:1.0:*:*:*:*:*:*:*","matchCriteriaId":"D9D4BF4B-0360-4A3B-8843-1D5E84CA948E"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wrvs4400n:1.1:*:*:*:*:*:*:*","matchCriteriaId":"7C01433D-F43E-4574-BC04-1F0C060BBFC4"},{"vulnerable":true,"criteria":"cpe:2.3:h:cisco:wrvs4400n:2:*:*:*:*:*:*:*","matchCriteriaId":"A3C11E2E-B910-45EC-A8FA-6BAAFFD26ED3"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wrvs4400n_software:1.3.0.5:*:*:*:*:*:*:*","matchCriteriaId":"C754BA1B-7DEC-49F4-835F-1EDA9289E19D"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wrvs4400n_software:1.3.1.0:*:*:*:*:*:*:*","matchCriteriaId":"1A0606AC-B349-411A-8D45-213A60FCFD08"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wrvs4400n_software:1.3.2.0:*:*:*:*:*:*:*","matchCriteriaId":"B1CE7344-400B-4E2F-B9DF-C2B0BB74B080"},{"vulnerable":true,"criteria":"cpe:2.3:a:cisco:wrvs4400n_software:2.0.0.3:*:*:*:*:*:*:*","matchCriteriaId":"BEB82F7E-A77E-400A-B894-3207026826C9"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2011","CveId":"1647","Ordinal":"1","Title":"CVE-2011-1647","CVE":"CVE-2011-1647","Year":"2011"},"notes":[{"CveYear":"2011","CveId":"1647","Ordinal":"1","NoteData":"The web management interface on the Cisco RVS4000 Gigabit Security Router with software 1.x before 1.3.3.4 and 2.x before 2.0.2.7, and the WRVS4400N Gigabit Security Router with software before 2.0.2.1, allows remote attackers to read the private key for the admin SSL certificate via unspecified vectors, aka Bug ID CSCtn23871.","Type":"Description","Title":"CVE-2011-1647"},{"CveYear":"2011","CveId":"1647","Ordinal":"2","NoteData":"2011-05-31","Type":"Other","Title":"Published"},{"CveYear":"2011","CveId":"1647","Ordinal":"3","NoteData":"2011-09-07","Type":"Other","Title":"Modified"}]}}}