Lucene search

K
cve[email protected]CVE-2008-3807
HistorySep 26, 2008 - 4:21 p.m.

CVE-2008-3807

2008-09-2616:21:44
web.nvd.nist.gov
27
4
cisco
ios
ubr10012
snmp
vulnerability
cve-2008-3807
nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.5%

Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with “private” as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests.

Affected configurations

NVD
Node
ciscoiosMatch12.2bc
OR
ciscoiosMatch12.2cx
OR
ciscoiosMatch12.2cy
OR
ciscoiosMatch12.2xf
OR
ciscoiosMatch12.3bc

Social References

More

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.4 Medium

AI Score

Confidence

Low

0.008 Low

EPSS

Percentile

81.5%