CVE-2010-1574

2010-07-0818:30:00

CWE-264

[email protected]

web.nvd.nist.gov

cve-2010-1574

cisco

industrial ethernet

ie 3000

snmp

vulnerability

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.3 High

AI Score

Confidence

High

0.015 Low

EPSS

Percentile

87.0%

JSON

IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589.

Affected configurations

NVD

Node

ciscoiosMatch12.2\(52\)se

ciscoiosMatch12.2\(52\)se1

AND

ciscoindustrial_ethernet_3000

CPENameOperatorVersion
cisco:ioscisco ioseq12.2\(52\)se
cisco:ioscisco ioseq12.2\(52\)se1
cisco:industrial_ethernet_3000cisco industrial ethernet 3000eq*