Lucene search

[email protected]CVE-2016-1452

HistoryJul 15, 2016 - 4:59 p.m.

CVE-2016-1452

2016-07-1516:59:06

CWE-254

CWE-200

[email protected]

web.nvd.nist.gov

cisco

asr 5000

software

snmp

configuration changes

remote attackers

vulnerability

cve-2016-1452

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526.

Affected configurations

NVD

Node

ciscoasr_5000Match-

AND

ciscoasr_5000_softwareMatch18.3.0

ciscoasr_5000_softwareMatch18.3_base

ciscoasr_5000_softwareMatch19.0.1

ciscoasr_5000_softwareMatch19.0.m0.60737

ciscoasr_5000_softwareMatch19.0.m0.60828

ciscoasr_5000_softwareMatch19.0.m0.61045

ciscoasr_5000_softwareMatch19.1.0

ciscoasr_5000_softwareMatch19.1.0.61559

ciscoasr_5000_softwareMatch19.2.0

ciscoasr_5000_softwareMatch19.3.0

ciscoasr_5000_softwareMatch20.0.0

CPENameOperatorVersion
cisco:asr_5000cisco asr 5000eq-
cisco:asr_5000_softwarecisco asr 5000 softwareeq18.3.0
cisco:asr_5000_softwarecisco asr 5000 softwareeq18.3_base
cisco:asr_5000_softwarecisco asr 5000 softwareeq19.0.1
cisco:asr_5000_softwarecisco asr 5000 softwareeq19.0.m0.60737
cisco:asr_5000_softwarecisco asr 5000 softwareeq19.0.m0.60828
cisco:asr_5000_softwarecisco asr 5000 softwareeq19.0.m0.61045
cisco:asr_5000_softwarecisco asr 5000 softwareeq19.1.0
cisco:asr_5000_softwarecisco asr 5000 softwareeq19.1.0.61559
cisco:asr_5000_softwarecisco asr 5000 softwareeq19.2.0

CPE	Name	Operator	Version
cisco:asr_5000	cisco asr 5000	eq	-
cisco:asr_5000_software	cisco asr 5000 software	eq	18.3.0
cisco:asr_5000_software	cisco asr 5000 software	eq	18.3_base
cisco:asr_5000_software	cisco asr 5000 software	eq	19.0.1
cisco:asr_5000_software	cisco asr 5000 software	eq	19.0.m0.60737
cisco:asr_5000_software	cisco asr 5000 software	eq	19.0.m0.60828
cisco:asr_5000_software	cisco asr 5000 software	eq	19.0.m0.61045
cisco:asr_5000_software	cisco asr 5000 software	eq	19.1.0
cisco:asr_5000_software	cisco asr 5000 software	eq	19.1.0.61559
cisco:asr_5000_software	cisco asr 5000 software	eq	19.2.0

Rows per page:

1-10 of 121

References

tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr

www.securityfocus.com/bid/91756

www.securitytracker.com/id/1036298

Social References

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

6.7 Medium

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

Related for CVE-2016-1452

nvd1 cvelist1 cisco1 prion1 openvas1