Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2004-1775 | First vendor Publication | 2004-12-31 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:N/I:P/A:N) | |||
|---|---|---|---|
| Cvss Base Score | 5 | Attack Range | Network |
| Cvss Impact Score | 2.9 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Cisco VACM (View-based Access Control MIB) for Catalyst Operating Software (CatOS) 5.5 and 6.1 and IOS 12.0 and 12.1 allows remote attackers to read and modify device configuration via the read-write community string. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1775 |
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 58150 | Cisco CatOS View-based Access Control MIB (VACM) read-write Community String ... Cisco IOS and CatOS contain a flaw that may allow a malicious user to retrieve public and private community strings from a vulnerable device. The issue is triggered by the Cisco View-based Access Control MIB (VACM) which allows SNMP public and private community strings to be retrieved remotely. It is possible that the flaw may allow an attacker to gain administrative privileges resulting in a loss of integrity. |
Nessus® Vulnerability Scanner
| Date | Description |
|---|---|
| 2010-09-01 | Name : The remote device is missing a vendor-supplied security patch File : cisco-sa-20010228-ios-snmp-communityhttp.nasl - Type : ACT_GATHER_INFO |
| 2001-06-15 | Name : The SNMP private community strings can be retrieved using SNMP. File : snmp_vacm.nasl - Type : ACT_GATHER_INFO |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:40 |
|
| 2024-11-28 12:06:24 |
|
| 2021-05-04 12:02:33 |
|
| 2021-04-22 01:02:45 |
|
| 2020-05-23 00:16:04 |
|
| 2017-07-11 12:01:39 |
|
| 2014-02-17 10:29:07 |
|
| 2013-05-11 11:46:25 |
|
