CVE-2010-1574

Cisco IOS 12.2(52)SE and 12.2(52)SE1 - Unauthenticated SNMP Access via Default Community Strings

Title source: llm
STIX 2.1

Description

IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589.

References (8)

Core 8
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/40407
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1024173
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/732671
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2010/1754
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/41436
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/66120
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/60145

Scores

EPSS 0.0473
EPSS Percentile 90.9%

Details

CWE
CWE-264
Status published
Products (3)
cisco/industrial_ethernet_3000
cisco/ios 12.2\(52\)se
cisco/ios 12.2\(52\)se1
Published Jul 08, 2010
Tracked Since Feb 18, 2026