CVE-2015-4202

EUVD-2015-4225
Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
ciscoios
12.2\(33\)sch
ciscoios
12.2sch:sch
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/viewAlert.x?alertId=39432
http://www.securityfocus.com/bid/75321
http://www.securitytracker.com/id/1032678
http://tools.cisco.com/security/center/viewAlert.x?alertId=39432
http://www.securityfocus.com/bid/75321
http://www.securitytracker.com/id/1032678