« Volver al listado

CVE-2016-1452

Estado: ModificadaMedia (6.5)—

Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Cisco — ASR 5000Cisco — ASR 5000 Software

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2016-1452",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 6.5,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
          "integrityImpact": "LOW",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 2.5,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@cisco.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2016-07-15T16:59:06.207",
  "references": [
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/91756",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://www.securitytracker.com/id/1036298",
      "source": "psirt@cisco.com"
    },
    {
      "url": "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/91756",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id/1036298",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        },
        {
          "lang": "en",
          "value": "CWE-254"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526."
    },
    {
      "lang": "es",
      "value": "Dispositivos Cisco ASR 5000 con software 18.3 hasta la versión 20.0.0 permiten a atacantes remotos realizar cambios de configuración sobre SNMP aprovechando los conocimientos de la comunidad de lectura y escritura, también conocido como Bug ID CSCuz29526."
    }
  ],
  "lastModified": "2026-06-17T00:42:00.177",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:cisco:asr_5000:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "746254AC-B039-432C-AA5C-A82260E57AD7"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DF3BDCAA-9E20-4DD6-A6FD-29E3FE79E98C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:18.3_base:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E9B1C78C-5349-4D4F-B3D1-DB76D432C520"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D300F74-79BD-4054-90F3-22FCD3E1FDA2"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60737:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "367EE318-4040-42C7-831C-747A71B7545C"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.60828:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "27E59FC3-EC5C-43E9-8444-2CC1ADC052DA"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.0.m0.61045:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BF555599-94A2-4E5A-A487-75D67297BC2B"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D26DF95-B1FB-4720-BAE0-33698CD5EB91"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.1.0.61559:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "32EAC723-2922-40C2-8B5A-56B51B33DCE0"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA6188B2-D27E-4FBE-B5C3-BC439D5CC405"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:19.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87A4BA17-D3C2-4CB0-A1CA-F40D63A022FF"
            },
            {
              "criteria": "cpe:2.3:a:cisco:asr_5000_software:20.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DDD3C35D-0CDD-4E67-99CC-1A7CB0C5042F"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "psirt@cisco.com"
}