Cisco IOS DOCSIS SNMP Community String Unauthorized Access Vulnerability

Bugtraq ID:	20125
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 20 2006 12:00AM
Updated:	Sep 21 2006 07:21PM
Credit:	This issue was reported by the vendor.
Vulnerable:	Cisco VG224 Analog Phone Gateway 0 Cisco MWR 1941 Mobile Wireless Edge Router 0 Cisco MWR 1900 Mobile Wireless Edge Router 0 Cisco IOS 12.4T Cisco IOS 12.4MR Cisco IOS 12.4 Cisco IOS 12.3YU Cisco IOS 12.3YT Cisco IOS 12.3YS Cisco IOS 12.3YQ Cisco IOS 12.3YM Cisco IOS 12.3YK Cisco IOS 12.3YJ Cisco IOS 12.3YI Cisco IOS 12.3YH Cisco IOS 12.3YG Cisco IOS 12.3YF Cisco IOS 12.3YD Cisco IOS 12.3YA Cisco IOS 12.3XY Cisco IOS 12.3XX Cisco IOS 12.3XD Cisco IOS 12.3T Cisco IOS 12.2ZJ Cisco IOS 12.2MC Cisco IAD2432 Integrated Access Device 0 Cisco IAD2431 Integrated Access Device 0 Cisco IAD2430 Integrated Access Device 0
Not Vulnerable:	Cisco IOS 12.4(4)T Cisco IOS 12.4(4)MR Cisco IOS 12.4(3) Cisco IOS 12.4(1b) Cisco IOS 12.3(8)T10 Cisco IOS 12.3(7)T11 Cisco IOS 12.3(4)T13 Cisco IOS 12.3(14)YQ8 Cisco IOS 12.3(14)YM8 Cisco IOS 12.3(14)YG5 Cisco IOS 12.3(11)T6 Cisco IOS 12.2(15)MC2c Cisco IAD2424 Integrated Access Device 0 Cisco IAD2423 Integrated Access Device 0 Cisco IAD2421 Integrated Access Device 0 Cisco IAD2420 Integrated Access Device 0

Cisco IOS DOCSIS SNMP Community String Unauthorized Access Vulnerability

Specifc devices running Cisco IOS are prone to an unauthorized-access vulnerability because they are inadvertently identified as supporting DOCSIS-compliant interfaces.

This issue allows an attacker to gain unauthorized access to the device and may result in a complete compromise of the device.

Cisco IOS DOCSIS SNMP Community String Unauthorized Access Vulnerability

An attacker uses standard network tools to exploit this issue.

Cisco IOS DOCSIS SNMP Community String Unauthorized Access Vulnerability

Solution:
The vendor has released fixes to address this issue. Please see the referenced advisory for details on obtaining and applying the appropriate updates.

Cisco IOS DOCSIS SNMP Community String Unauthorized Access Vulnerability

References:

• Cisco IOS Homepage (Cisco Systems)
  
• CoPP Manual (Cisco Systems)
  
• Cisco Security Advisory: DOCSIS Read-Write Community String Enabled in Non-DOCSI (Cisco Systems PSIRT)