Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
Fix
Patch, vendor advisory and mitigation references on NVD 2
- http://www.iss.net/security_center/static/7806.php Vendor Advisory
- http://www.iss.net/security_center/static/7806.php Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.4 · ciscoNVD modified 2026-10-09 20:17
Affected (CPE criteria) 3
cpe:2.3:h:cisco:ubr920:*:*:*:*:*:*:*:*cpe:2.3:h:cisco:ubr924:*:*:*:*:*:*:*:*cpe:2.3:h:cisco:ubr925:*:*:*:*:*:*:*:*
References 8
- http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html
- http://www.iss.net/security_center/static/7806.php Vendor Advisory
- http://www.securityfocus.com/bid/3758
- http://archives.neohapsis.com/archives/bugtraq/2001-12/0297.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0002.html
- http://www.iss.net/security_center/static/7806.php Vendor Advisory
- http://www.securityfocus.com/bid/3758