CVE-2016-1452

Cisco ASR 5000 devices with software 18.3 through 20.0.0 allow remote attackers to make configuration changes over SNMP by leveraging knowledge of the read-write community, aka Bug ID CSCuz29526.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
ciscoCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
VendorProductVersion
ciscoasr_5000
-
ciscoasr_5000_software
18.3.0
ciscoasr_5000_software
18.3_base:_base
ciscoasr_5000_software
19.0.1
ciscoasr_5000_software
19.0.m0.60737:m0.60737
ciscoasr_5000_software
19.0.m0.60828:m0.60828
ciscoasr_5000_software
19.0.m0.61045:m0.61045
ciscoasr_5000_software
19.1.0
ciscoasr_5000_software
19.1.0.61559
ciscoasr_5000_software
19.2.0
ciscoasr_5000_software
19.3.0
ciscoasr_5000_software
20.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr
http://www.securityfocus.com/bid/91756
http://www.securitytracker.com/id/1036298
http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160713-asr
http://www.securityfocus.com/bid/91756
http://www.securitytracker.com/id/1036298