PT-2016-4800 · Cisco · Cisco Asr 5000

Publicado 2016-07-15 · Atualizado 2017-09-01 · CVE-2016-1452

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices versions 18.3 through 20.0.0

Description The issue allows remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community.

Recommendations For versions 18.3 through 20.0.0, restrict access to SNMP to minimize the risk of exploitation. Consider changing the read-write community string to prevent unauthorized configuration changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Enumeração de Fraquezas

CWE-254

CWE-200

Identificadores relacionados

CVE-2016-1452

Produtos afetados

Cisco Asr 5000

Referências · 5

• http://securitytracker.com/id/1036298 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-1452 · Nota de Segurança
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-1452 · Aviso do Fabricante
• http://securityfocus.com/bid/91756 · Nota