PT-2006-5693 · Cisco · Cisco Ios

Ryan Giobbi · Published 2006-09-23 · Updated 2017-10-11 · CVE-2006-4950

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 12.2 through 12.4 before 20060920

Description The issue allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables, due to incorrect identification of DOCSIS support.

Recommendations For Cisco IOS versions 12.2 through 12.4 before 20060920, consider changing the hard-coded cable-docsis community string to prevent unauthorized access until a patch is available. Restrict access to SNMP variables to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-4950

Affected Products

Cisco Ios

References · 10

• http://securityfocus.com/bid/20125 · Patch
• http://secunia.com/advisories/21974 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-4950 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29054 · Note
• http://cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml · Patch, Vendor Advisory
• http://kb.cert.org/vuls/id/123140 · Note
• http://vupen.com/english/advisories/2006/3722 · Note
• http://osvdb.org/29034 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665 · Note
• http://securitytracker.com/id?1016899 · Note