CVE-2010-1574
First published: Thu Jul 08 2010(Updated: )
IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589.
Credit: ykramarz@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Puppet Cisco IOS | =12.2\(52\)se | |
| Puppet Cisco IOS | =12.2\(52\)se1 | |
| Cisco IE 3000-4tc Industrial Ethernet switch |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://securitytracker.com/id?1024173
- http://www.securityfocus.com/bid/41436
- http://secunia.com/advisories/40407
- http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3891f.shtml
- http://osvdb.org/66120
- http://www.vupen.com/english/advisories/2010/1754
- http://www.kb.cert.org/vuls/id/732671
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60145
Frequently Asked Questions
What is the severity of CVE-2010-1574?
CVE-2010-1574 has a medium severity rating due to the potential for unauthorized access and configuration modification.
How do I fix CVE-2010-1574?
To fix CVE-2010-1574, change the default community names from 'public' and 'private' to more secure, unique identifiers.
Which devices are affected by CVE-2010-1574?
CVE-2010-1574 affects Cisco Industrial Ethernet 3000 series switches running IOS versions 12.2(52)SE and 12.2(52)SE1.
What risks are associated with CVE-2010-1574?
The main risks associated with CVE-2010-1574 include unauthorized access to sensitive information and potential manipulation of network configurations.
Is CVE-2010-1574 still a concern for users?
Yes, CVE-2010-1574 remains a concern for users of affected Cisco devices that have not updated their community strings for security.
- collector/nvd-historical
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/cisco
- canonical/puppet cisco ios
- version/puppet cisco ios/12.2\(52\)se
- version/puppet cisco ios/12.2\(52\)se1
- canonical/cisco ie 3000-4tc industrial ethernet switch