NVD

Id
13095  
Name
CVE-2010-1574  
Description
IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-07-08  
Modified Date
2010-07-27  
Seq
2010-1574  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
72335 13095 CVE-2010-1574 1024173  View
72336 13095 CVE-2010-1574 20100707 Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability  View
72337 13095 CVE-2010-1574 VU#732671  View
72338 13095 CVE-2010-1574 41436  View
72339 13095 CVE-2010-1574 ADV-2010-1754  View
72340 13095 CVE-2010-1574 cisco-industrial-snmp-unauth-access(60145)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35951 JVNDB-2010-001731 Cisco Industrial Ethernet 3000 シリーズに SNMP Community String がハードコードされている問題 Cisco が提供する Cisco Industrial Ethernet 3000 シリーズに設定されている SNMP Community String は、遠隔の第三者に使用される可能性があります。 CVE-2010-1574 44154 CVE-2010-1574 13095 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001731.html 2010-07-13 2010-09-29 View