Unscored severity · published Dec 31, 2002
CVE-2002-2112
RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community…
–
CVSS
1.4%
EPSS
No
On KEV
Description
RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Digital Cable Modem · Rca
dcm225; dcm225e · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2112
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2112
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-03/0335.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-03/0336.html
www.iss.net
http://www.iss.net/security_center/static/8662.php
www.securityfocus.com
http://www.securityfocus.com/bid/4377
More from Digital Cable Modem
–
CVE-2010-1544
micro_httpd on the RCA DCM425 cable modem allows remote attackers to cause a denial of service (device reboot) via a long string to TCP port 80
–
CVE-2002-2110
The RCA Digital Cable Modems DCM225 and DCM225E allow remote attackers to cause a denial of service (modem device reset) by connecting to port 80 on the 10.0.0.0/8 device