Lucene search

MitreCVE-2002-1706

HistoryJun 21, 2005 - 4:00 a.m.

CVE-2002-1706

2005-06-2104:00:00

CWE-347

mitre

web.nvd.nist.gov

cisco

ios

software

vulnerability

remote

modification

docsis

settings

nvd

cve-2002-1706

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.021

Percentile

89.3%

JSON

Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS) settings via a DOCSIS file without a Message Integrity Check (MIC) signature, which is approved by the router.

Affected configurations

Nvd

Node

ciscoiosRange11.3–12.2

AND

ciscoubr7100Match-

ciscoubr7200Match-

VendorProductVersionCPE
ciscoios*cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
ciscoubr7100-cpe:2.3:h:cisco:ubr7100:-:*:*:*:*:*:*:*
ciscoubr7200-cpe:2.3:h:cisco:ubr7200:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cisco	ios	*	cpe:2.3:o:cisco:ios::::::::
cisco	ubr7100	-	cpe:2.3:h:cisco:ubr7100:-:::::::*
cisco	ubr7200	-	cpe:2.3:h:cisco:ubr7200:-:::::::*

References

www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml

www.securityfocus.com/bid/5041

exchange.xforce.ibmcloud.com/vulnerabilities/9368

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.021

Percentile

89.3%

JSON

Related for CVE-2002-1706