Cisco Industrial Ethernet 3000 Series Switches Hardcoded SNMP Community Names Security Vulnerability

Bugtraq ID:	41436
Class:	Design Error
CVE:	CVE-2010-1574
Remote:	Yes
Local:	No
Published:	Jul 07 2010 12:00AM
Updated:	Jul 07 2010 12:00AM
Credit:	Cisco
Vulnerable:	Cisco IOS 12.2(52)SE1 Cisco IOS 12.2(52)SE Cisco Industrial Ethernet 3000 Series Switches 0
Not Vulnerable:	Cisco IOS 12.2(55)SE

Cisco Industrial Ethernet 3000 Series Switches Hardcoded SNMP Community Names Security Vulnerability

Cisco Industrial Ethernet 3000 Series Switches are prone to a security vulnerability.

Successful exploits may allow attackers to obtain full control of an affected device. This issue is tracked by Cisco Bug ID CSCtf25589.

This issue affects Industrial Ethernet 3000 Series Switches running IOS versions 12.2(52)SE and 12.2(52)SE1.

Cisco Industrial Ethernet 3000 Series Switches Hardcoded SNMP Community Names Security Vulnerability

Attackers can use standard tools to exploit this issue.

Cisco Industrial Ethernet 3000 Series Switches Hardcoded SNMP Community Names Security Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for more information.

Cisco Industrial Ethernet 3000 Series Switches Hardcoded SNMP Community Names Security Vulnerability

References:

• Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Eth (Cisco)