Vulnerabilities > CVE-2001-1210 - Unspecified vulnerability in Cisco Ubr920, Ubr924 and Ubr925

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
cisco
nessus

Summary

Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.

Vulnerable Configurations

Part Description Count
Hardware
Cisco
3

Nessus

NASL familySNMP
NASL idSNMP_DEFAULT_COMMUNITIES.NASL
descriptionIt is possible to obtain the default community names of the remote SNMP server. An attacker can use this information to gain more knowledge about the remote host or to change the configuration of the remote system (if the default community allows such modifications).
last seen2020-06-01
modified2020-06-02
plugin id10264
published2002-11-25
reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/10264
titleSNMP Agent Default Community Names