CVE-2001-1210

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.

CVSS v2.0 6.4 MEDIUM

6.4^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 10.0 / Impact : 4.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html
http://www.iss.net/security_center/static/7806.php	Vendor Advisory
http://www.securityfocus.com/bid/3758

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:cisco:ubr920::::::::
	cpe:2.3:h:cisco:ubr924::::::::
	cpe:2.3:h:cisco:ubr925::::::::

History

No history.

Information

Published : 2001-12-30 05:00

Updated : 2024-02-28 10:24

NVD link : CVE-2001-1210

Mitre link : CVE-2001-1210

CVE.ORG link : CVE-2001-1210

JSON object : View

Products Affected

cisco

ubr924
ubr925
ubr920

CWE

NVD-CWE-Other

{"id": "CVE-2001-1210", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 4.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2001-12-30T05:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/7806.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/3758", "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings."}, {"lang": "es", "value": "Los routers Cisco serie ubr900 conformes al est\u00e1ndar 'Data-over-Cable Service Interface Specifications (DOCSIS) deben entregarse sin restricciones de acceso SNMP, lo que puede permitir a atacantes remotos leer y escribir informaci\u00f3n en la MIB usando cadenas de comunidad arbitrarias."}], "lastModified": "2008-09-10T19:09:55.557", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:cisco:ubr920:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA727862-77B9-4069-85F9-6152E0E9FB88"}, {"criteria": "cpe:2.3:h:cisco:ubr924:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FF89B688-461A-41EE-A7C2-21A6D927B169"}, {"criteria": "cpe:2.3:h:cisco:ubr925:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1227BD2F-D5E1-46EA-871D-242091C7598F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}