Cisco RVS4000/WRVS4400N/WAP4410N Devices Test Interface Remote Privilege Escalation Vulnerability

Bugtraq ID:	64776
Class:	Design Error
CVE:	CVE-2014-0659
Remote:	Yes
Local:	No
Published:	Jan 10 2014 12:00AM
Updated:	Jan 31 2014 01:04AM
Credit:	Cisco
Vulnerable:	Cisco WRVS4400N Wireless-N Gigabit Security Router 2.0.2.1 Cisco WRVS4400N Wireless-N Gigabit Security Router 1.1 Cisco WRVS4400N Wireless-N Gigabit Security Router 1.0 Cisco RVS4000 4-port Gigabit Security Router 1.3.2 .0 Cisco RVS4000 4-port Gigabit Security Router 2.0.2.7 Cisco RVS4000 4-port Gigabit Security Router 1.3.3.5
Not Vulnerable:

Cisco RVS4000/WRVS4400N/WAP4410N Devices Test Interface Remote Privilege Escalation Vulnerability

Cisco RVS4000, WRVS4400N, and WAP4410N devices are prone to a remote privilege-escalation vulnerability.

A remote attacker can exploit this issue to gain access to affected devices with root-level privileges.

This issue is tracked by Cisco Bug ID's CSCum37566, CSCum43693, CSCum43700 and CSCum43685.

Cisco RVS4000/WRVS4400N/WAP4410N Devices Test Interface Remote Privilege Escalation Vulnerability

Attackers can use standard, readily available tools to exploit this issue.

Cisco RVS4000/WRVS4400N/WAP4410N Devices Test Interface Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco RVS4000/WRVS4400N/WAP4410N Devices Test Interface Remote Privilege Escalation Vulnerability

References:

• Cisco Homepage (Cisco )