CVE Vulnerabilities

CVE-2008-3807

Published: Sep 26, 2008 | Modified: Jun 02, 2022
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Cisco IOS 12.2 and 12.3 on Cisco uBR10012 series devices, when linecard redundancy is configured, enables a read/write SNMP service with private as the community, which allows remote attackers to obtain administrative access by guessing this community and sending SNMP requests.

Affected Software

Name Vendor Start Version End Version
Ios Cisco 12.2bc (including) 12.2bc (including)
Ios Cisco 12.2cx (including) 12.2cx (including)
Ios Cisco 12.2cy (including) 12.2cy (including)
Ios Cisco 12.2xf (including) 12.2xf (including)
Ios Cisco 12.3bc (including) 12.3bc (including)

References