Vulnerability Note VU#732671

Cisco Industrial Ethernet 3000 Series switches have hardcoded SNMP community strings

Original Release date: 12 Jul 2010 | Last revised: 12 Jul 2010

Overview

Cisco Industrial Ethernet 3000 (IE 3000) Series switches running Cisco IOS Software releases 12.2(52)SE or 12.2(52)SE1, contain well-known, hard-coded read and write SNMP community strings. An remote attacker could take full control of a vulnerable device.

Description

Cisco Industrial Ethernet 3000 (IE 3000) Series switches running Cisco IOS Software releases 12.2(52)SE or 12.2(52)SE1, contain well-known, hard-coded read and write SNMP community strings (names). The hard-coded strings are restored to the running configuration after a device reload. The SNMP service is disabled by default.

Impact

Successful exploitation of the vulnerability could result in an attacker obtaining full control of the device.

Solution

Upgrade

According to Cisco Security Advisory cisco-sa-20100707-snmp, the first fixed IOS releases is 12.2(55)SE, currently scheduled to be available August 2010.


Disable default SNMP community strings

Cisco Security Advisory cisco-sa-20100707-snmp provides detailed information about workarounds and mitigation techniques, including manually and automatically removing SNMP community strings.

Vendor Information (Learn More)

VendorStatusDate NotifiedDate Updated
Cisco Systems, Inc.Affected-12 Jul 2010
If you are a vendor and your product is affected, let us know.

CVSS Metrics (Learn More)

Group Score Vector
Base N/A N/A
Temporal N/A N/A
Environmental N/A N/A

References

Credit

Information from Secunia and Cisco was used in this document.

This document was written by Michael Orlando.

Other Information

  • CVE IDs: CVE-2010-1574
  • Date Public: 07 Jul 2010
  • Date First Published: 12 Jul 2010
  • Date Last Updated: 12 Jul 2010
  • Severity Metric: 5.93
  • Document Revision: 16

Feedback

If you have feedback, comments, or additional information about this vulnerability, please send us email.