CVE:CVE-2011-1646
CNNVD:CNNVD-201105-269
Cisco RVS4000和WRVS4400N路由器的web管理界面中存在远程命令注入漏洞。远程认证用户可以借助ping或traceroute测试参数，在底层操作系统中执行具有根级权限的任意命令。
solution:Upgrade cisco rvs4000 to a higher version than 1,2,and avoid the version 1,2; Upgrade cisco rvs4000_software to a higher version than 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3,and avoid the version 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3; Upgrade cisco wrvs4400n to a higher version than 1.0,1.1,2,and avoid the version 1.0,1.1,2; Upgrade cisco wrvs4400n_software to a higher version than 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3,and avoid the version 1.3.0.5,1.3.1.0,1.3.2.0,2.0.0.3