PT-2016-4800 · Cisco · Cisco Asr 5000

Published 2016-07-15 · Updated 2017-09-01 · CVE-2016-1452

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Cisco ASR 5000 devices versions 18.3 through 20.0.0

Description The issue allows remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community.

Recommendations For versions 18.3 through 20.0.0, restrict access to SNMP to minimize the risk of exploitation. Consider changing the read-write community string to prevent unauthorized configuration changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Weakness Enumeration

CWE-254

CWE-200

Related Identifiers

CVE-2016-1452

Affected Products

Cisco Asr 5000

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-1452 · Security Note
• http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-1452 · Vendor Advisory
• http://securitytracker.com/id/1036298 · Note
• http://securityfocus.com/bid/91756 · Note