5

CVE-2015-4202

EPSS 0.45%
Veröffentlicht 20.06.2015 14:59:01
Zuletzt bearbeitet 12.04.2025 10:46:40
Quelle psirt@cisco.com
CVE-Watchlists
Login
Unerledigt
Login

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Cisco ≫ Ios Version12.2sch

Cisco ≫ Ubr10000 Cable Modem Termination System

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.45%	0.606

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

http://tools.cisco.com/security/center/viewAlert.x?alertId=39432

Vendor Advisory

http://www.securityfocus.com/bid/75321

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1032678

Third Party Advisory

VDB Entry

https://nvd.nist.gov/vuln/detail/CVE-2015-4202

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2015-4202

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2015-4202

EUVD