CVE-2001-1210: Medium severity Cisco Ubr920 vulnerability

Published Dec 30, 2001

Updated

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.

Affected Software

3 affected components

Cisco Ubr920

Cisco Ubr924

Cisco Ubr925

Event History

Dec 30, 2001

CVE Published

via NVD·05:00 AM

Data Sourced

via NVD·05:00 AM

DescriptionSeverityAffected Software

Mar 15, 2002

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

Which devices are affected?

Cisco ubr920, ubr924, and ubr925 routers are listed as affected.

What access does an attacker need to exploit this issue?

The issue is remotely exploitable over the network and does not require authentication. An attacker can use arbitrary SNMP community strings to access the device MIB.

What could an attacker do through the exposed SNMP service?

An attacker may read information from the MIB and write information to it. The provided data does not specify which individual MIB objects can be modified.

Is the affected SNMP configuration likely to be enabled by default?

The description states that DOCSIS-conformant ubr900 series routers must ship without SNMP access restrictions, indicating that the unrestricted SNMP condition is part of the required shipping configuration.

CVE-2001-1210: Medium severity Cisco Ubr920 vulnerability

Affected Software

Event History

Frequently Asked Questions

Which devices are affected?

What access does an attacker need to exploit this issue?

What could an attacker do through the exposed SNMP service?

Is the affected SNMP configuration likely to be enabled by default?

Company

Resources

Contact

Frequently Asked Questions

Which devices are affected?

What access does an attacker need to exploit this issue?

What could an attacker do through the exposed SNMP service?

Is the affected SNMP configuration likely to be enabled by default?