CVE:CVE-2011-3997
CNNVD:CNNVD-201111-146
Opengear Console Servers 2.2.1之前版本中存在远程安全认证绕过漏洞。该漏洞源于一个未明错误，恶意用户可利用该漏洞绕过某些安全限制和认证机制，成功的利用该漏洞可改变控制台服务器的设置，或者获得访问控制台应用程序的权限。
solution:Upgrade opengear opengear_console_server_firmware to a higher version than 2.1.0u7,2.0.4,2.0.4u1,2.0.6,2.0.8,2.0.9,2.1.0,2.1.0u1,and avoid the version (,2.1.0u7],2.0.4,2.0.4u1,2.0.6,2.0.8,2.0.9,2.1.0,2.1.0u1; Upgrade opengear acm5000_console_server to a higher version than *; Upgrade opengear cm4000_console_server to a higher version than *; Upgrade opengear im4004-5_console_server to a higher version than *; Upgrade opengear im4200_console_server to a higher version than *; Upgrade opengear img4000_console_server to a higher version than *; Upgrade opengear kcs6000_rackside_console_server to a higher version than *