CVEvulnerability
CVE-2006-4950
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-09-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.
Affected configurations
• cisco ios (<= 12.3)
• cisco ios 12.3\(1a\)
• cisco ios 12.3\(2\)ja
• cisco ios 12.3\(2\)ja5
• cisco ios 12.3\(2\)jk
• cisco ios 12.3\(2\)jk1
• cisco ios 12.3\(2\)t3
• cisco ios 12.3\(2\)t8
• cisco ios 12.3\(2\)xa4
• cisco ios 12.3\(2\)xa5
• cisco ios 12.3\(2\)xc1
• cisco ios 12.3\(2\)xc2
• cisco ios 12.3\(2\)xc3
• cisco ios 12.3\(2\)xc4
• cisco ios 12.3\(2\)xe3
• cisco ios 12.3\(2\)xe4
• cisco ios 12.3\(3e\)
• cisco ios 12.3\(3h\)
• cisco ios 12.3\(3i\)
• cisco ios 12.3\(4\)eo1
• cisco ios 12.3\(4\)ja
• cisco ios 12.3\(4\)ja1
• cisco ios 12.3\(4\)t
• cisco ios 12.3\(4\)t1
• cisco ios 12.3\(4\)t2
• cisco ios 12.3\(4\)t3
• cisco ios 12.3\(4\)t4
• cisco ios 12.3\(4\)t8
• cisco ios 12.3\(4\)tpc11a
• cisco ios 12.3\(4\)xd
• cisco ios 12.3\(4\)xd1
• cisco ios 12.3\(4\)xd2
• cisco ios 12.3\(4\)xe4
• cisco ios 12.3\(4\)xg1
• cisco ios 12.3\(4\)xg2
• cisco ios 12.3\(4\)xg4
• cisco ios 12.3\(4\)xg5
• cisco ios 12.3\(4\)xh
• cisco ios 12.3\(4\)xk
• cisco ios 12.3\(4\)xk1
• cisco ios 12.3\(4\)xk3
• cisco ios 12.3\(4\)xk4
• cisco ios 12.3\(4\)xq
• cisco ios 12.3\(4\)xq1
• cisco ios 12.3\(5\)
• cisco ios 12.3\(5\)b1
• cisco ios 12.3\(5a\)
• cisco ios 12.3\(5a\)b
• cisco ios 12.3\(5a\)b2
• cisco ios 12.3\(5a\)b5
• cisco ios 12.3\(5b\)
• cisco ios 12.3\(5c\)
• cisco ios 12.3\(5e\)
• cisco ios 12.3\(5f\)
• cisco ios 12.3\(6\)
• cisco ios 12.3\(6a\)
• cisco ios 12.3\(6d\)
• cisco ios 12.3\(6e\)
• cisco ios 12.3\(6f\)
• cisco ios 12.3\(7\)ja
… and 168 more
References
- http://secunia.com/advisories/21974 Patch, Vendor Advisory
- http://securitytracker.com/id?1016899 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml Patch
- http://www.kb.cert.org/vuls/id/123140 US Government Resource
- http://www.osvdb.org/29034 www.osvdb.org
- http://www.securityfocus.com/bid/20125 Patch
- http://www.vupen.com/english/advisories/2006/3722 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29054 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665 oval.cisecurity.org
- http://secunia.com/advisories/21974 Patch, Vendor Advisory
- http://securitytracker.com/id?1016899 securitytracker.com
- http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml Patch
- http://www.kb.cert.org/vuls/id/123140 US Government Resource
- http://www.osvdb.org/29034 www.osvdb.org
- http://www.securityfocus.com/bid/20125 Patch
- http://www.vupen.com/english/advisories/2006/3722 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29054 exchange.xforce.ibmcloud.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665 oval.cisecurity.org