PT-2001-2344 · Cisco · Cisco Ubr900 Series Routers

Published 2001-12-30 · Updated 2008-09-10 · CVE-2001-1210

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Cisco ubr900 series routers (affected versions not specified)

Description The issue concerns Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard. These routers ship without SNMP access restrictions, allowing remote attackers to read and write information to the MIB using arbitrary community strings.

Recommendations For Cisco ubr900 series routers, consider implementing SNMP access restrictions to prevent unauthorized access to the MIB. As a temporary workaround, restrict access to the SNMP service until a more permanent solution is available.

Fix

Related Identifiers

CVE-2001-1210

Affected Products

Cisco Ubr900 Series Routers

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2001-1210 · Security Note
• http://iss.net/security_center/static/7806.php · Vendor Advisory
• http://securityfocus.com/bid/3758 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html · Note