PT-2008-5161 · Cisco · Cisco Ubr10012+1

Publicado 2008-09-26 · Atualizado 2022-06-02 · CVE-2008-3807

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 and 12.3 on Cisco uBR10012 series devices

Description The issue allows remote attackers to obtain administrative access by guessing the SNMP community and sending SNMP requests. This is because the read/write SNMP service is enabled with a default community string private when linecard redundancy is configured.

Recommendations For Cisco IOS versions 12.2 and 12.3 on Cisco uBR10012 series devices, change the default SNMP community string private to a secure string to prevent unauthorized access. Consider disabling the SNMP service if it is not necessary for operations.

Correção

Identificadores relacionados

CVE-2008-3807

Produtos afetados

Cisco Ios

Cisco Ubr10012

Referências · 6

• http://secunia.com/advisories/31990 · Nota
• http://cisco.com/en/US/products/products_security_advisory09186a0080a014b1.shtml · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5452 · Nota
• http://vupen.com/english/advisories/2008/2670 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3807 · Nota de Segurança
• http://securitytracker.com/id?1020941 · Nota