Cisco uBR10012 Router Default SNMP Community Vulnerability

Bugtraq ID:	31355
Class:	Design Error
CVE:	CVE-2008-3807
Remote:	Yes
Local:	No
Published:	Sep 24 2008 12:00AM
Updated:	Sep 24 2008 07:49PM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	Cisco uBR 10012 0
Not Vulnerable:

Cisco uBR10012 Router Default SNMP Community Vulnerability

Cisco uBR10012 routers are high-performance network devices.

The routers are prone to a weak default configuration issue. A remote attacker may exploit this issue to gain complete access to the vulnerable device.

Cisco uBR10012 routers are vulnerable.

This issue is being tracked by Cisco bug ID CSCek57932.

Cisco uBR10012 Router Default SNMP Community Vulnerability

An attacker may exploit this issue via widely available tools.

Cisco uBR10012 Router Default SNMP Community Vulnerability

Solution:
Fixes are available; please see the references for more information.

Cisco uBR10012 Router Default SNMP Community Vulnerability

References:

• Cisco Homepage (Cisco)
  
• Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability (Cisco)
  
• Cisco Security Advisory: Cisco uBR10012 Series Devices SNMP Vulnerability (Cisco Systems Product Security Incident Response Team )