ID CVE-2001-1210
Summary Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
References
Vulnerable Configurations
  • cpe:2.3:h:cisco:ubr920:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:ubr920:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:ubr924:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:ubr924:*:*:*:*:*:*:*:*
  • cpe:2.3:h:cisco:ubr925:*:*:*:*:*:*:*:*
    cpe:2.3:h:cisco:ubr925:*:*:*:*:*:*:*:*
CVSS
Base: 6.4 (as of 10-09-2008 - 19:09)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:N
refmap via4
bid 3758
bugtraq 20011230 Possible security problem with Cisco ubr900 series routers
vulnwatch 20020103 Security Problem in Cisco ubr900 Series Routers
xf cisco-docsis-default-strings(7806)
Last major update 10-09-2008 - 19:09
Published 30-12-2001 - 05:00
Last modified 10-09-2008 - 19:09
Back to Top