CVE-2002-1706

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2002-1706
Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS) settings via a DOCSIS file without a Message Integrity Check (MIC) signature, which is approved by the router.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml Not Applicable Patch Vendor Advisory
http://www.securityfocus.com/bid/5041 Broken Link Patch Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/9368 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
OR cpe:2.3:h:cisco:ubr7100:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ubr7200:-:*:*:*:*:*:*:*
History

08 Feb 2024, 20:47

Type Values Removed Values Added
CWE NVD-CWE-Other CWE-347
CVSS v2 : 5.0
v3 : unknown 		v2 : 5.0
v3 : 7.5
First Time Cisco ubr7200
Cisco ubr7100
CPE cpe:2.3:o:cisco:ios:12.2:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:11.3t:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:11.3xa:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.0:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2xf:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.1:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.0t:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2t:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.1ec:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.0sc:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.0xr:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.2bc:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.1cx:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:12.1t:*:*:*:*:*:*:*
cpe:2.3:o:cisco:ios:11.3na:*:*:*:*:*:*:*		 cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ubr7100:-:*:*:*:*:*:*:*
cpe:2.3:h:cisco:ubr7200:-:*:*:*:*:*:*:*
References () http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml - Patch, Vendor Advisory () http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml - Not Applicable, Patch, Vendor Advisory
References () http://www.securityfocus.com/bid/5041 - Patch () http://www.securityfocus.com/bid/5041 - Broken Link, Patch, Third Party Advisory, VDB Entry
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/9368 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/9368 - Third Party Advisory, VDB Entry
Information

Published : 2002-12-31 05:00

Updated : 2024-02-08 20:47

NVD link : CVE-2002-1706

Mitre link : CVE-2002-1706

CVE.ORG link : CVE-2002-1706

JSON object : View

Products Affected

cisco

  • ubr7100
  • ios
  • ubr7200
CWE
CWE-347

Improper Verification of Cryptographic Signature