Lucene search
HistorySep 23, 2006 - 10:07 a.m.
CVE-2006-4950
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
High
0.027 Low
EPSS
Percentile
90.5%
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.
Affected configurations
Node
ciscoiosRange≤12.3
ORciscoiosMatch12.3\(1a\)
ORciscoiosMatch12.3\(2\)ja
ORciscoiosMatch12.3\(2\)ja5
ORciscoiosMatch12.3\(2\)jk
ORciscoiosMatch12.3\(2\)jk1
ORciscoiosMatch12.3\(2\)t3
ORciscoiosMatch12.3\(2\)t8
ORciscoiosMatch12.3\(2\)xa4
ORciscoiosMatch12.3\(2\)xa5
ORciscoiosMatch12.3\(2\)xc1
ORciscoiosMatch12.3\(2\)xc2
ORciscoiosMatch12.3\(2\)xc3
ORciscoiosMatch12.3\(2\)xc4
ORciscoiosMatch12.3\(2\)xe3
ORciscoiosMatch12.3\(2\)xe4
ORciscoiosMatch12.3\(3e\)
ORciscoiosMatch12.3\(3h\)
ORciscoiosMatch12.3\(3i\)
ORciscoiosMatch12.3\(4\)eo1
ORciscoiosMatch12.3\(4\)ja
ORciscoiosMatch12.3\(4\)ja1
ORciscoiosMatch12.3\(4\)t
ORciscoiosMatch12.3\(4\)t1
ORciscoiosMatch12.3\(4\)t2
ORciscoiosMatch12.3\(4\)t3
ORciscoiosMatch12.3\(4\)t4
ORciscoiosMatch12.3\(4\)t8
ORciscoiosMatch12.3\(4\)tpc11a
ORciscoiosMatch12.3\(4\)xd
ORciscoiosMatch12.3\(4\)xd1
ORciscoiosMatch12.3\(4\)xd2
ORciscoiosMatch12.3\(4\)xe4
ORciscoiosMatch12.3\(4\)xg1
ORciscoiosMatch12.3\(4\)xg2
ORciscoiosMatch12.3\(4\)xg4
ORciscoiosMatch12.3\(4\)xg5
ORciscoiosMatch12.3\(4\)xh
ORciscoiosMatch12.3\(4\)xk
ORciscoiosMatch12.3\(4\)xk1
ORciscoiosMatch12.3\(4\)xk3
ORciscoiosMatch12.3\(4\)xk4
ORciscoiosMatch12.3\(4\)xq
ORciscoiosMatch12.3\(4\)xq1
ORciscoiosMatch12.3\(5\)
ORciscoiosMatch12.3\(5\)b1
ORciscoiosMatch12.3\(5a\)
ORciscoiosMatch12.3\(5a\)b
ORciscoiosMatch12.3\(5a\)b2
ORciscoiosMatch12.3\(5a\)b5
ORciscoiosMatch12.3\(5b\)
ORciscoiosMatch12.3\(5c\)
ORciscoiosMatch12.3\(5e\)
ORciscoiosMatch12.3\(5f\)
ORciscoiosMatch12.3\(6\)
ORciscoiosMatch12.3\(6a\)
ORciscoiosMatch12.3\(6d\)
ORciscoiosMatch12.3\(6e\)
ORciscoiosMatch12.3\(6f\)
ORciscoiosMatch12.3\(7\)ja
ORciscoiosMatch12.3\(7\)ja1
ORciscoiosMatch12.3\(7\)jx
ORciscoiosMatch12.3\(7\)t
ORciscoiosMatch12.3\(7\)t4
ORciscoiosMatch12.3\(7\)t8
ORciscoiosMatch12.3\(7\)t9
ORciscoiosMatch12.3\(7\)t10
ORciscoiosMatch12.3\(7\)t12
ORciscoiosMatch12.3\(7\)xi3
ORciscoiosMatch12.3\(7\)xi4
ORciscoiosMatch12.3\(7\)xi7
ORciscoiosMatch12.3\(7\)xr3
ORciscoiosMatch12.3\(7\)xr4
ORciscoiosMatch12.3\(7\)xr6
ORciscoiosMatch12.3\(7.7\)
ORciscoiosMatch12.3\(8\)ja
ORciscoiosMatch12.3\(8\)ja1
ORciscoiosMatch12.3\(8\)t4
ORciscoiosMatch12.3\(8\)t7
ORciscoiosMatch12.3\(8\)t8
ORciscoiosMatch12.3\(8\)t9
ORciscoiosMatch12.3\(8\)t11
ORciscoiosMatch12.3\(8\)xu2
ORciscoiosMatch12.3\(8\)xy4
ORciscoiosMatch12.3\(8\)xy5
ORciscoiosMatch12.3\(8\)xy6
ORciscoiosMatch12.3\(8\)ya1
ORciscoiosMatch12.3\(8\)yd
ORciscoiosMatch12.3\(8\)yf
ORciscoiosMatch12.3\(8\)yg
ORciscoiosMatch12.3\(8\)yg1
ORciscoiosMatch12.3\(8\)yg2
ORciscoiosMatch12.3\(8\)yg3
ORciscoiosMatch12.3\(8\)yh
ORciscoiosMatch12.3\(8\)yi
ORciscoiosMatch12.3\(8\)yi1
ORciscoiosMatch12.3\(8\)yi3
ORciscoiosMatch12.3\(9\)
ORciscoiosMatch12.3\(9a\)bc
ORciscoiosMatch12.3\(9a\)bc2
ORciscoiosMatch12.3\(9a\)bc6
ORciscoiosMatch12.3\(9a\)bc7
ORciscoiosMatch12.3\(9d\)
ORciscoiosMatch12.3\(9e\)
ORciscoiosMatch12.3\(10\)
ORciscoiosMatch12.3\(10c\)
ORciscoiosMatch12.3\(10d\)
ORciscoiosMatch12.3\(10e\)
ORciscoiosMatch12.3\(11\)
ORciscoiosMatch12.3\(11\)t
ORciscoiosMatch12.3\(11\)t4
ORciscoiosMatch12.3\(11\)t5
ORciscoiosMatch12.3\(11\)t6
ORciscoiosMatch12.3\(11\)t8
ORciscoiosMatch12.3\(11\)t9
ORciscoiosMatch12.3\(11\)xl
ORciscoiosMatch12.3\(11\)xl3
ORciscoiosMatch12.3\(11\)yf
ORciscoiosMatch12.3\(11\)yf2
ORciscoiosMatch12.3\(11\)yf3
ORciscoiosMatch12.3\(11\)yf4
ORciscoiosMatch12.3\(11\)yj
ORciscoiosMatch12.3\(11\)yk
ORciscoiosMatch12.3\(11\)yk1
ORciscoiosMatch12.3\(11\)yk2
ORciscoiosMatch12.3\(11\)yl
ORciscoiosMatch12.3\(11\)yn
ORciscoiosMatch12.3\(11\)yr
ORciscoiosMatch12.3\(11\)ys
ORciscoiosMatch12.3\(11\)ys1
ORciscoiosMatch12.3\(11\)yw
ORciscoiosMatch12.3\(12\)
ORciscoiosMatch12.3\(12b\)
ORciscoiosMatch12.3\(12e\)
ORciscoiosMatch12.3\(13\)
ORciscoiosMatch12.3\(13a\)
ORciscoiosMatch12.3\(13a\)bc
ORciscoiosMatch12.3\(13a\)bc1
ORciscoiosMatch12.3\(13b\)
ORciscoiosMatch12.3\(14\)t
ORciscoiosMatch12.3\(14\)t2
ORciscoiosMatch12.3\(14\)t4
ORciscoiosMatch12.3\(14\)t5
ORciscoiosMatch12.3\(14\)ym4
ORciscoiosMatch12.3\(14\)yq
ORciscoiosMatch12.3\(14\)yq1
ORciscoiosMatch12.3\(14\)yq3
ORciscoiosMatch12.3\(14\)yq4
ORciscoiosMatch12.3\(14\)yt
ORciscoiosMatch12.3\(14\)yt1
ORciscoiosMatch12.3\(14\)yu
ORciscoiosMatch12.3\(14\)yu1
ORciscoiosMatch12.3\(15\)
ORciscoiosMatch12.3\(15b\)
ORciscoiosMatch12.3\(16\)
ORciscoiosMatch12.3b
ORciscoiosMatch12.3bc
ORciscoiosMatch12.3bw
ORciscoiosMatch12.3j
ORciscoiosMatch12.3ja
ORciscoiosMatch12.3jk
ORciscoiosMatch12.3jx
ORciscoiosMatch12.3t
ORciscoiosMatch12.3tpc
ORciscoiosMatch12.3xa
ORciscoiosMatch12.3xb
ORciscoiosMatch12.3xc
ORciscoiosMatch12.3xd
ORciscoiosMatch12.3xe
ORciscoiosMatch12.3xf
ORciscoiosMatch12.3xg
ORciscoiosMatch12.3xh
ORciscoiosMatch12.3xi
ORciscoiosMatch12.3xj
ORciscoiosMatch12.3xk
ORciscoiosMatch12.3xl
ORciscoiosMatch12.3xm
ORciscoiosMatch12.3xn
ORciscoiosMatch12.3xq
ORciscoiosMatch12.3xr
ORciscoiosMatch12.3xs
ORciscoiosMatch12.3xt
ORciscoiosMatch12.3xu
ORciscoiosMatch12.3xv
ORciscoiosMatch12.3xw
ORciscoiosMatch12.3xx
ORciscoiosMatch12.3xy
ORciscoiosMatch12.3xz
ORciscoiosMatch12.3ya
ORciscoiosMatch12.3yb
ORciscoiosMatch12.3yc
ORciscoiosMatch12.3yd
ORciscoiosMatch12.3ye
ORciscoiosMatch12.3yf
ORciscoiosMatch12.3yg
ORciscoiosMatch12.3yh
ORciscoiosMatch12.3yi
ORciscoiosMatch12.3yj
ORciscoiosMatch12.3yk
ORciscoiosMatch12.3yl
ORciscoiosMatch12.3ym
ORciscoiosMatch12.3yn
ORciscoiosMatch12.3yq
ORciscoiosMatch12.3yr
ORciscoiosMatch12.3ys
ORciscoiosMatch12.3yt
ORciscoiosMatch12.3yu
ORciscoiosMatch12.3yw
ORciscoiosMatch12.3yx
ORciscoiosMatch12.4
ORciscoiosMatch12.4\(1\)
ORciscoiosMatch12.4\(1b\)
ORciscoiosMatch12.4\(1c\)
ORciscoiosMatch12.4\(2\)mr
ORciscoiosMatch12.4\(2\)mr1
ORciscoiosMatch12.4\(2\)t
ORciscoiosMatch12.4\(2\)t1
ORciscoiosMatch12.4\(2\)t2
ORciscoiosMatch12.4\(2\)xa
ORciscoiosMatch12.4\(2\)xb
ORciscoiosMatch12.4\(3a\)
ORciscoiosMatch12.4\(3b\)
ORciscoiosMatch12.4\(4\)t
ORciscoiosMatch12.4\(5\)
ORciscoiosMatch12.4mr
ORciscoiosMatch12.4t
ORciscoiosMatch12.4xa
ORciscoiosMatch12.4xb
References
secunia.com/advisories/21974
securitytracker.com/id?1016899
www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml
www.kb.cert.org/vuls/id/123140
www.osvdb.org/29034
www.securityfocus.com/bid/20125
www.vupen.com/english/advisories/2006/3722
exchange.xforce.ibmcloud.com/vulnerabilities/29054
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665
Related
nessus
nessus
DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms
2012-01-10 00:00:00
cvelist
cvelist
CVE-2006-4950
2006-09-23 10:00:00
cve
cve
CVE-2006-4950
2006-09-23 10:07:00
cert
cert
Cisco products contain hard-coded SNMP values
2006-10-13 00:00:00
cisco
cisco
DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms
2006-09-20 16:00:00
openvas
openvas
Report default community names of the SNMP Agent
2014-03-12 00:00:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
High
0.027 Low
EPSS
Percentile
90.5%
Related for NVD:CVE-2006-4950