Lucene search

[email protected]CVE-2005-0612

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0612

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cisco

videoconferencing

system

snmp

community strings

remote attackers

denial of service

configuration

cve-2005-0612

nvd

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.6%

JSON

Cisco IP/VC Videoconferencing System 3510, 3520, 3525 and 3530 contain hard-coded default SNMP community strings, which allows remote attackers to gain access, cause a denial of service, and modify configuration.

CPENameOperatorVersion
cisco:ipvc-3510-mcucisco ipvc-3510-mcueq*
cisco:ipvc-3520-gw-4vcisco ipvc-3520-gw-4veq*
cisco:ipvc-3520-gw-2vcisco ipvc-3520-gw-2veq*
cisco:ipvc-3520-gw-2b2vcisco ipvc-3520-gw-2b2veq*
cisco:ipvc-3520-gw-2bcisco ipvc-3520-gw-2beq*
cisco:ipvc-3525-gw-1pcisco ipvc-3525-gw-1peq*
cisco:ipvc-3530-vtacisco ipvc-3530-vtaeq*

CPE	Name	Operator	Version
cisco:ipvc-3510-mcu	cisco ipvc-3510-mcu	eq	*
cisco:ipvc-3520-gw-4v	cisco ipvc-3520-gw-4v	eq	*
cisco:ipvc-3520-gw-2v	cisco ipvc-3520-gw-2v	eq	*
cisco:ipvc-3520-gw-2b2v	cisco ipvc-3520-gw-2b2v	eq	*
cisco:ipvc-3520-gw-2b	cisco ipvc-3520-gw-2b	eq	*
cisco:ipvc-3525-gw-1p	cisco ipvc-3525-gw-1p	eq	*
cisco:ipvc-3530-vta	cisco ipvc-3530-vta	eq	*

References

secunia.com/advisories/14122

securitytracker.com/id?1013067

www.cisco.com/public/technotes/cisco-sa-20050202-ipvc.shtml

www.securityfocus.com/bid/12424

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

80.6%

JSON