CVE:CVE-2011-1645
CNNVD:CNNVD-201105-272
Cisco RVS4000和WRVS4400N路由器中存在信息泄露漏洞。该漏洞是由于web管理界面没有正确限制对备份配置文件的访问，远程攻击者可以利用该漏洞下载该文件并获取潜在敏感信息。
solution:Upgrade cisco rvs4000 to a higher version than 1,2,and avoid the version 1,2; Upgrade cisco rvs4000_software to a higher version than 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3,and avoid the version 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3; Upgrade cisco wrvs4400n to a higher version than 1.0,1.1,2,and avoid the version 1.0,1.1,2; Upgrade cisco wrvs4400n_software to a higher version than 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3,and avoid the version 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3