PT-2001-2344 · Cisco · Cisco Ubr900 Series Routers

Publicado 2001-12-30 · Atualizado 2008-09-10 · CVE-2001-1210

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco ubr900 series routers (affected versions not specified)

Description The issue concerns Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard. These routers ship without SNMP access restrictions, allowing remote attackers to read and write information to the MIB using arbitrary community strings.

Recommendations For Cisco ubr900 series routers, consider implementing SNMP access restrictions to prevent unauthorized access to the MIB. As a temporary workaround, restrict access to the SNMP service until a more permanent solution is available.

Correção

Identificadores relacionados

CVE-2001-1210

Produtos afetados

Cisco Ubr900 Series Routers

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-1210 · Nota de Segurança
• http://iss.net/security_center/static/7806.php · Aviso do Fabricante
• http://securityfocus.com/bid/3758 · Nota
• http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html · Nota