Unscored severity · published Jul 8, 2010
CVE-2010-1574
IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW…
–
CVSS
4.7%
EPSS
No
On KEV
Description
IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IE
Industrial Ethernet 3000 · Cisco
All versions, or not specified · source: NVD
IO
Ios · Cisco
12.2(52)se; 12.2(52)se1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1574
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1574
osvdb.org
http://osvdb.org/66120
Vendor Advisory
http://secunia.com/advisories/40407
securitytracker.com
http://securitytracker.com/id?1024173
Vendor Advisory
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3891f.shtml
US Government Resource
http://www.kb.cert.org/vuls/id/732671
www.securityfocus.com
http://www.securityfocus.com/bid/41436