NVD

Id
63558  
Name
CVE-2006-4950  
Description
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-09-23  
Modified Date
2011-03-07  
Seq
2006-4950  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
331263 63558 CVE-2006-4950 oval:org.mitre.oval:def:5665  View
331264 63558 CVE-2006-4950 1016899  View
331265 63558 CVE-2006-4950 20060920 DOCSIS Read-Write Community String Enabled in Non-DOCSIS Platforms  View
331266 63558 CVE-2006-4950 VU#123140  View
331267 63558 CVE-2006-4950 20125  View
331268 63558 CVE-2006-4950 ADV-2006-3722  View
331269 63558 CVE-2006-4950 ios-docsis-default-snmp(29054)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58376 JVNDB-2006-000572 Cisco IOS のDOCSIS に未対応なプラットフォームにおける不正な制御が行われる脆弱性 Cisco IOS には、デバイスが DOCSIS をサポートすると誤って識別されるために、IOS にハードコードされている読み書き可能なコミュニティストリング "cable-docsis" が意図せず有効となってしまう脆弱性が存在します。 CVE-2006-4950 21052 CVE-2006-4950 63558 10 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000572.html 2006-09-20 2007-04-01 View