PT-2006-5693 · Cisco · Cisco Ios

Ryan Giobbi · Publicado 2006-09-23 · Atualizado 2017-10-11 · CVE-2006-4950

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 before 20060920

Description The issue allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables, due to incorrect identification of DOCSIS support.

Recommendations For Cisco IOS versions 12.2 through 12.4 before 20060920, consider changing the hard-coded cable-docsis community string to prevent unauthorized access until a patch is available. Restrict access to SNMP variables to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2006-4950

Produtos afetados

Cisco Ios

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/29054 · Nota
• http://cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml · Correção, Aviso do Fabricante
• http://securityfocus.com/bid/20125 · Correção
• http://kb.cert.org/vuls/id/123140 · Nota
• http://vupen.com/english/advisories/2006/3722 · Nota
• http://secunia.com/advisories/21974 · Aviso do Fabricante
• http://osvdb.org/29034 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665 · Nota
• http://securitytracker.com/id?1016899 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4950 · Nota de Segurança