CVEvulnerability
CVE-2015-4202
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.
Affected configurations
• cisco ios 12.2\(33\)sch
• cisco ios 12.2sch
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39432 Vendor Advisory
- http://www.securityfocus.com/bid/75321 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032678 Third Party Advisory, VDB Entry
- http://tools.cisco.com/security/center/viewAlert.x?alertId=39432 Vendor Advisory
- http://www.securityfocus.com/bid/75321 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1032678 Third Party Advisory, VDB Entry