Cisco IOS 12.0(5)XU through 12.1(2) allows remote attackers to read system administration and topology information via an snmp-server host command, which creates a readable community community string if one has not been previously created.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ios | Cisco | 12.0 (including) | 12.0 (including) |
| Ios | Cisco | 12.0(1) (including) | 12.0(1) (including) |
| Ios | Cisco | 12.0(1)w (including) | 12.0(1)w (including) |
| Ios | Cisco | 12.0(1)xa3 (including) | 12.0(1)xa3 (including) |
| Ios | Cisco | 12.0(1)xb (including) | 12.0(1)xb (including) |
| Ios | Cisco | 12.0(1)xe (including) | 12.0(1)xe (including) |
| Ios | Cisco | 12.0(2) (including) | 12.0(2) (including) |
| Ios | Cisco | 12.0(2)xc (including) | 12.0(2)xc (including) |
| Ios | Cisco | 12.0(2)xd (including) | 12.0(2)xd (including) |
| Ios | Cisco | 12.0(2)xe (including) | 12.0(2)xe (including) |
| Ios | Cisco | 12.0(2)xf (including) | 12.0(2)xf (including) |
| Ios | Cisco | 12.0(2)xg (including) | 12.0(2)xg (including) |
| Ios | Cisco | 12.0(2b) (including) | 12.0(2b) (including) |
| Ios | Cisco | 12.0(3) (including) | 12.0(3) (including) |
| Ios | Cisco | 12.0(3)t2 (including) | 12.0(3)t2 (including) |
| Ios | Cisco | 12.0(3d) (including) | 12.0(3d) (including) |
| Ios | Cisco | 12.0(4)s (including) | 12.0(4)s (including) |
| Ios | Cisco | 12.0(4)t (including) | 12.0(4)t (including) |
| Ios | Cisco | 12.0(4)xe (including) | 12.0(4)xe (including) |
| Ios | Cisco | 12.0(4)xe1 (including) | 12.0(4)xe1 (including) |
| Ios | Cisco | 12.0(4)xm (including) | 12.0(4)xm (including) |
| Ios | Cisco | 12.0(4)xm1 (including) | 12.0(4)xm1 (including) |
| Ios | Cisco | 12.0(5)t (including) | 12.0(5)t (including) |
| Ios | Cisco | 12.0(5)t1 (including) | 12.0(5)t1 (including) |
| Ios | Cisco | 12.0(5)wc (including) | 12.0(5)wc (including) |
| Ios | Cisco | 12.0(5)wc2 (including) | 12.0(5)wc2 (including) |
| Ios | Cisco | 12.0(5)wc2b (including) | 12.0(5)wc2b (including) |
| Ios | Cisco | 12.0(5)wc3 (including) | 12.0(5)wc3 (including) |
| Ios | Cisco | 12.0(5)wc3b (including) | 12.0(5)wc3b (including) |
| Ios | Cisco | 12.0(5)wx (including) | 12.0(5)wx (including) |
| Ios | Cisco | 12.0(5)xe (including) | 12.0(5)xe (including) |
| Ios | Cisco | 12.0(5)xk (including) | 12.0(5)xk (including) |
| Ios | Cisco | 12.0(5)xk2 (including) | 12.0(5)xk2 (including) |
| Ios | Cisco | 12.0(5)xn (including) | 12.0(5)xn (including) |
| Ios | Cisco | 12.0(5)xn1 (including) | 12.0(5)xn1 (including) |
| Ios | Cisco | 12.0(5)xs (including) | 12.0(5)xs (including) |
| Ios | Cisco | 12.0(5)xu (including) | 12.0(5)xu (including) |
| Ios | Cisco | 12.0(5)yb4 (including) | 12.0(5)yb4 (including) |
| Ios | Cisco | 12.0(5.1)xp (including) | 12.0(5.1)xp (including) |
| Ios | Cisco | 12.0(5.2)xu (including) | 12.0(5.2)xu (including) |
| Ios | Cisco | 12.0(5.3)wc1 (including) | 12.0(5.3)wc1 (including) |
| Ios | Cisco | 12.0(5.4)wc1 (including) | 12.0(5.4)wc1 (including) |
| Ios | Cisco | 12.0(6b) (including) | 12.0(6b) (including) |
| Ios | Cisco | 12.0(7)db2 (including) | 12.0(7)db2 (including) |
| Ios | Cisco | 12.0(7)dc1 (including) | 12.0(7)dc1 (including) |
| Ios | Cisco | 12.0(7)s1 (including) | 12.0(7)s1 (including) |
| Ios | Cisco | 12.0(7)sc (including) | 12.0(7)sc (including) |
| Ios | Cisco | 12.0(7)t (including) | 12.0(7)t (including) |
| Ios | Cisco | 12.0(7)t2 (including) | 12.0(7)t2 (including) |
| Ios | Cisco | 12.0(7)wx5(15a) (including) | 12.0(7)wx5(15a) (including) |
| Ios | Cisco | 12.0(7)xe (including) | 12.0(7)xe (including) |
| Ios | Cisco | 12.0(7)xe2 (including) | 12.0(7)xe2 (including) |
| Ios | Cisco | 12.0(7)xf (including) | 12.0(7)xf (including) |
| Ios | Cisco | 12.0(7)xf1 (including) | 12.0(7)xf1 (including) |
| Ios | Cisco | 12.0(7)xk (including) | 12.0(7)xk (including) |
| Ios | Cisco | 12.0(7)xk3 (including) | 12.0(7)xk3 (including) |
| Ios | Cisco | 12.0(7)xv (including) | 12.0(7)xv (including) |
| Ios | Cisco | 12.0(7.4)s (including) | 12.0(7.4)s (including) |
| Ios | Cisco | 12.0(7a) (including) | 12.0(7a) (including) |
| Ios | Cisco | 12.0(8) (including) | 12.0(8) (including) |
| Ios | Cisco | 12.0(8)s1 (including) | 12.0(8)s1 (including) |
| Ios | Cisco | 12.0(8.0.2)s (including) | 12.0(8.0.2)s (including) |
| Ios | Cisco | 12.0(8.3)sc (including) | 12.0(8.3)sc (including) |
| Ios | Cisco | 12.0(8a) (including) | 12.0(8a) (including) |
| Ios | Cisco | 12.0(9) (including) | 12.0(9) (including) |
| Ios | Cisco | 12.0(9)s (including) | 12.0(9)s (including) |
| Ios | Cisco | 12.0(9)s8 (including) | 12.0(9)s8 (including) |
| Ios | Cisco | 12.0(9a) (including) | 12.0(9a) (including) |
| Ios | Cisco | 12.0(10)s7 (including) | 12.0(10)s7 (including) |
| Ios | Cisco | 12.0(10)w5 (including) | 12.0(10)w5 (including) |
| Ios | Cisco | 12.0(10)w5(18f) (including) | 12.0(10)w5(18f) (including) |
| Ios | Cisco | 12.0(10)w5(18g) (including) | 12.0(10)w5(18g) (including) |
| Ios | Cisco | 12.0(10a) (including) | 12.0(10a) (including) |
| Ios | Cisco | 12.0(11)s6 (including) | 12.0(11)s6 (including) |
| Ios | Cisco | 12.0(11)st4 (including) | 12.0(11)st4 (including) |
| Ios | Cisco | 12.0(11a) (including) | 12.0(11a) (including) |
| Ios | Cisco | 12.0(12)s3 (including) | 12.0(12)s3 (including) |
| Ios | Cisco | 12.0(12a) (including) | 12.0(12a) (including) |
| Ios | Cisco | 12.0(13)s6 (including) | 12.0(13)s6 (including) |
| Ios | Cisco | 12.0(13)w5(19c) (including) | 12.0(13)w5(19c) (including) |
| Ios | Cisco | 12.0(13)wt6(1) (including) | 12.0(13)wt6(1) (including) |
| Ios | Cisco | 12.0(13a) (including) | 12.0(13a) (including) |
| Ios | Cisco | 12.0(14)s7 (including) | 12.0(14)s7 (including) |
| Ios | Cisco | 12.0(14)st (including) | 12.0(14)st (including) |
| Ios | Cisco | 12.0(14)st3 (including) | 12.0(14)st3 (including) |
| Ios | Cisco | 12.0(14)w5(20) (including) | 12.0(14)w5(20) (including) |
| Ios | Cisco | 12.0(14a) (including) | 12.0(14a) (including) |
| Ios | Cisco | 12.0(15)s3 (including) | 12.0(15)s3 (including) |
| Ios | Cisco | 12.0(15)s6 (including) | 12.0(15)s6 (including) |
| Ios | Cisco | 12.0(15a) (including) | 12.0(15a) (including) |
| Ios | Cisco | 12.0(16)s8 (including) | 12.0(16)s8 (including) |
| Ios | Cisco | 12.0(16)sc3 (including) | 12.0(16)sc3 (including) |
| Ios | Cisco | 12.0(16)st1 (including) | 12.0(16)st1 (including) |
| Ios | Cisco | 12.0(16)w5(21) (including) | 12.0(16)w5(21) (including) |
| Ios | Cisco | 12.0(16.06)s (including) | 12.0(16.06)s (including) |
| Ios | Cisco | 12.0(16a) (including) | 12.0(16a) (including) |
| Ios | Cisco | 12.0(17) (including) | 12.0(17) (including) |
| Ios | Cisco | 12.0(17)s (including) | 12.0(17)s (including) |
| Ios | Cisco | 12.0(17)s4 (including) | 12.0(17)s4 (including) |
| Ios | Cisco | 12.0(17)sl2 (including) | 12.0(17)sl2 (including) |
| Ios | Cisco | 12.0(17)sl6 (including) | 12.0(17)sl6 (including) |
| Ios | Cisco | 12.0(17)st1 (including) | 12.0(17)st1 (including) |
| Ios | Cisco | 12.0(17)st5 (including) | 12.0(17)st5 (including) |
| Ios | Cisco | 12.0(17a) (including) | 12.0(17a) (including) |
| Ios | Cisco | 12.0(18)s (including) | 12.0(18)s (including) |
| Ios | Cisco | 12.0(18)s5 (including) | 12.0(18)s5 (including) |
| Ios | Cisco | 12.0(18)st1 (including) | 12.0(18)st1 (including) |
| Ios | Cisco | 12.0(18)w5(22b) (including) | 12.0(18)w5(22b) (including) |
| Ios | Cisco | 12.0(18b) (including) | 12.0(18b) (including) |
| Ios | Cisco | 12.0da (including) | 12.0da (including) |
| Ios | Cisco | 12.0db (including) | 12.0db (including) |
| Ios | Cisco | 12.0dc (including) | 12.0dc (including) |
| Ios | Cisco | 12.0s (including) | 12.0s (including) |
| Ios | Cisco | 12.0sc (including) | 12.0sc (including) |
| Ios | Cisco | 12.0sl (including) | 12.0sl (including) |
| Ios | Cisco | 12.0sp (including) | 12.0sp (including) |
| Ios | Cisco | 12.0st (including) | 12.0st (including) |
| Ios | Cisco | 12.0sx (including) | 12.0sx (including) |
| Ios | Cisco | 12.0t (including) | 12.0t (including) |
| Ios | Cisco | 12.0w5 (including) | 12.0w5 (including) |
| Ios | Cisco | 12.0wc (including) | 12.0wc (including) |
| Ios | Cisco | 12.0wt (including) | 12.0wt (including) |
| Ios | Cisco | 12.0wx (including) | 12.0wx (including) |
| Ios | Cisco | 12.0xa (including) | 12.0xa (including) |
| Ios | Cisco | 12.0xb (including) | 12.0xb (including) |
| Ios | Cisco | 12.0xc (including) | 12.0xc (including) |
| Ios | Cisco | 12.0xd (including) | 12.0xd (including) |
| Ios | Cisco | 12.0xe (including) | 12.0xe (including) |
| Ios | Cisco | 12.0xf (including) | 12.0xf (including) |
| Ios | Cisco | 12.0xg (including) | 12.0xg (including) |
| Ios | Cisco | 12.0xh (including) | 12.0xh (including) |
| Ios | Cisco | 12.0xi (including) | 12.0xi (including) |
| Ios | Cisco | 12.0xj (including) | 12.0xj (including) |
| Ios | Cisco | 12.0xk (including) | 12.0xk (including) |
| Ios | Cisco | 12.0xl (including) | 12.0xl (including) |
| Ios | Cisco | 12.0xm (including) | 12.0xm (including) |
| Ios | Cisco | 12.0xn (including) | 12.0xn (including) |
| Ios | Cisco | 12.0xp (including) | 12.0xp (including) |
| Ios | Cisco | 12.0xq (including) | 12.0xq (including) |
| Ios | Cisco | 12.0xr (including) | 12.0xr (including) |
| Ios | Cisco | 12.0xs (including) | 12.0xs (including) |
| Ios | Cisco | 12.0xu (including) | 12.0xu (including) |
| Ios | Cisco | 12.1 (including) | 12.1 (including) |
| Ios | Cisco | 12.1(20)e (including) | 12.1(20)e (including) |
| Ios | Cisco | 12.1(20)e1 (including) | 12.1(20)e1 (including) |
| Ios | Cisco | 12.1(20)e2 (including) | 12.1(20)e2 (including) |
| Ios | Cisco | 12.1(20)ea1 (including) | 12.1(20)ea1 (including) |
| Ios | Cisco | 12.1(20)ec (including) | 12.1(20)ec (including) |
| Ios | Cisco | 12.1(20)ec1 (including) | 12.1(20)ec1 (including) |
| Ios | Cisco | 12.1(20)ew (including) | 12.1(20)ew (including) |
| Ios | Cisco | 12.1(20)ew1 (including) | 12.1(20)ew1 (including) |
| Ios | Cisco | 12.1aa (including) | 12.1aa (including) |
| Ios | Cisco | 12.1ax (including) | 12.1ax (including) |
| Ios | Cisco | 12.1ay (including) | 12.1ay (including) |
| Ios | Cisco | 12.1da (including) | 12.1da (including) |
| Ios | Cisco | 12.1db (including) | 12.1db (including) |
| Ios | Cisco | 12.1dc (including) | 12.1dc (including) |
| Ios | Cisco | 12.1e (including) | 12.1e (including) |
| Ios | Cisco | 12.1ea (including) | 12.1ea (including) |
| Ios | Cisco | 12.1eb (including) | 12.1eb (including) |
| Ios | Cisco | 12.1ec (including) | 12.1ec (including) |
| Ios | Cisco | 12.1eo (including) | 12.1eo (including) |
| Ios | Cisco | 12.1eu (including) | 12.1eu (including) |
| Ios | Cisco | 12.1ev (including) | 12.1ev (including) |
| Ios | Cisco | 12.1ew (including) | 12.1ew (including) |
| Ios | Cisco | 12.1ex (including) | 12.1ex (including) |
| Ios | Cisco | 12.1ey (including) | 12.1ey (including) |
| Ios | Cisco | 12.1m (including) | 12.1m (including) |
| Ios | Cisco | 12.1t (including) | 12.1t (including) |
| Ios | Cisco | 12.1xa (including) | 12.1xa (including) |
| Ios | Cisco | 12.1xb (including) | 12.1xb (including) |
| Ios | Cisco | 12.1xc (including) | 12.1xc (including) |
| Ios | Cisco | 12.1xd (including) | 12.1xd (including) |
| Ios | Cisco | 12.1xe (including) | 12.1xe (including) |
| Ios | Cisco | 12.1xf (including) | 12.1xf (including) |
| Ios | Cisco | 12.1xg (including) | 12.1xg (including) |
| Ios | Cisco | 12.1xh (including) | 12.1xh (including) |
| Ios | Cisco | 12.1xi (including) | 12.1xi (including) |
| Ios | Cisco | 12.1xj (including) | 12.1xj (including) |
| Ios | Cisco | 12.1xk (including) | 12.1xk (including) |
| Ios | Cisco | 12.1xl (including) | 12.1xl (including) |
| Ios | Cisco | 12.1xm (including) | 12.1xm (including) |
| Ios | Cisco | 12.1xp (including) | 12.1xp (including) |
| Ios | Cisco | 12.1xq (including) | 12.1xq (including) |
| Ios | Cisco | 12.1xr (including) | 12.1xr (including) |
| Ios | Cisco | 12.1xs (including) | 12.1xs (including) |
| Ios | Cisco | 12.1xt (including) | 12.1xt (including) |
| Ios | Cisco | 12.1xu (including) | 12.1xu (including) |
| Ios | Cisco | 12.1xv (including) | 12.1xv (including) |
| Ios | Cisco | 12.1xw (including) | 12.1xw (including) |
| Ios | Cisco | 12.1xx (including) | 12.1xx (including) |
| Ios | Cisco | 12.1xy (including) | 12.1xy (including) |
| Ios | Cisco | 12.1xz (including) | 12.1xz (including) |
| Ios | Cisco | 12.1yb (including) | 12.1yb (including) |
| Ios | Cisco | 12.1yc (including) | 12.1yc (including) |
| Ios | Cisco | 12.1yd (including) | 12.1yd (including) |
| Ios | Cisco | 12.1ye (including) | 12.1ye (including) |
| Ios | Cisco | 12.1yf (including) | 12.1yf (including) |
| Ios | Cisco | 12.1yh (including) | 12.1yh (including) |
| Ios | Cisco | 12.1yi (including) | 12.1yi (including) |
| Ios | Cisco | 12.1yj (including) | 12.1yj (including) |
References
- http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml
- http://www.kb.cert.org/vuls/id/848944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6178
- http://www.cisco.com/warp/public/707/ios-snmp-community-vulns-pub.shtml
- http://www.kb.cert.org/vuls/id/848944
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6178