Description
Cisco ubr900 series routers that conform to the Data-over-Cable Service Interface Specifications (DOCSIS) standard must ship without SNMP access restrictions, which can allow remote attackers to read and write information to the MIB using arbitrary community strings.
References
- 20011230 Possible security problem with Cisco ubr900 series routers mailing-list
- 20020103 Security Problem in Cisco ubr900 Series Routers mailing-list
- cisco-docsis-default-strings(7806) vdb-entry
- 3758 vdb-entry