SNMP 'cable-docsis' Community String

Binary data 3749.prm...

DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms

A vulnerability exists in certain Cisco IOS ® software release trains running on the Cisco IAD2400 series, 1900 Series Mobile Wireless Edge Routers and Cisco VG224 Analog Phone Gateways. Vulnerable versions may contain a default hard-coded Simple Network Management Protocol SNMP community string...

Cisco routers unauthorized SNMP access

Read/write DOCSIS community exists on non-DOCSIS routers...

Debian DSA-853-1 : ethereal - several vulnerabilities

Several security problems have been discovered in ethereal, a commonly used network traffic analyser. The Common Vulnerabilities and Exposures project identifies the following problems : - CAN-2005-2360 Memory allocation errors in the LDAP dissector can cause a denial of service. - CAN-2005-2361...

security flaw

Unknown vulnerability in the 1 AgentX dissector, 2 PER dissector, 3 DOCSIS dissector, 4 SCTP graphs, 5 HTTP dissector, 6 DCERPC, 7 DHCP, 8 RADIUS dissector, 9 Telnet dissector, 10 IS-IS LSP dissector, or 11 NCP dissector in Ethereal 0.8.19 through 0.10.11 allows remote attackers to cause a denial...

CVE-2002-2112

RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information...

CVE-2002-2112

CVE-2002-2112 affects RCA Digital Cable Modem DCM225 and DCM225E, and other DOCSIS-conforming modems, via SNMP using the default public community string. The underlying issue is exposure of MIB information to remote readers/writers, enabling read/write access to SNMP MIB data. The available docum...

FreeBSD : ethereal -- multiple protocol dissectors vulnerabilities (5d51d245-00ca-11da-bc08-0001020eed82)

An Ethreal Security Advisories reports : Our testing program has turned up several more security issues : - The LDAP dissector could free static memory and crash. - The AgentX dissector could crash. - The 802.3 dissector could go into an infinite loop. - The PER dissector could abort. - The DHCP...

CVE-2002-1706

CVE-2002-1706 affects Cisco IOS on uBR7200/uBR7100 (11.3–12.2). A defect allows remote attackers to modify DOCSIS settings by submitting a DOCSIS file without a Message Integrity Check (MIC) signature, which the router approves. Connected advisories describe a two-part issue for the CMTS family a...

CVE-2002-1706

Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is approved by th...

CVE-2004-1776

Cisco IOS 12.13 and 12.13T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification DOCSIS standard...

CVE-2004-1776

Cisco IOS 12.1(3) and 12.1(3)T contain a vulnerability where remote attackers can read and modify device configuration data via the DOCSIS cable-docsis read-write community string. This affects SNMP-related read-write access and can expose/alter configuration data (impacting confidentiality and i...

SNMP cable-docsis Community String (deprecated)

Binary data 1411.prm...

SNMP cable-docsis Community String (deprecated)

Binary data 1410.prm...

CVE-2002-1706

Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is approved by th...

CVE-2002-1968

Com21 DOXport 1100 series cable modem running firmware 2.1.1.106, and possibly other versions before 2.1.1.108.003, downloads a DOCSIS configuration file from a TFTP server running on the internal network, which allows local users to modify configuration of the modem via a malicious TFTP server...

PT-2002-2428 · Cisco · Cisco Ios +2

Name of the Vulnerable Software and Affected Versions: Cisco IOS software versions 11.3 through 12.2 Description: The issue allows remote attackers to modify Data Over Cable Service Interface Specification DOCSIS settings via a DOCSIS file without a Message Integrity Check MIC signature, which is...

CVE-2001-1210

CVE-2001-1210 concerns Cisco UBR900 series DOCSIS routers that ship without SNMP access restrictions, enabling remote read/write of MIB data via arbitrary SNMP community strings. The root cause is lack of SNMP access controls on the management plane; impact is partial confidentiality/integrity of...

Possible security problem with Cisco ubr900 series routers

Problem: RW access to the MIB, and eventually access to the router config, using ANY yes, ANY community name. The following routers were tested: ubr920, ubr924, ubr925 image file for the ubr925 is as follows: ubr925-k1sv4y556i-mz.121-3a.XL1 snmp-server commands used in each router config, not jus...

CVE-2004-1776

Cisco IOS 12.13 and 12.13T allows remote attackers to read and modify device configuration data via the cable-docsis read-write community string used by the Data Over Cable Service Interface Specification DOCSIS standard...