Vulnerability Note VU#732671

Cisco Industrial Ethernet 3000 Series switches have hardcoded SNMP community strings

Overview

Cisco Industrial Ethernet 3000 (IE 3000) Series switches running Cisco IOS Software releases 12.2(52)SE or 12.2(52)SE1, contain well-known, hard-coded read and write SNMP community strings. An remote attacker could take full control of a vulnerable device.

I. Description

Cisco Industrial Ethernet 3000 (IE 3000) Series switches running Cisco IOS Software releases 12.2(52)SE or 12.2(52)SE1, contain well-known, hard-coded read and write SNMP community strings (names). The hard-coded strings are restored to the running configuration after a device reload. The SNMP service is disabled by default.

II. Impact

Successful exploitation of the vulnerability could result in an attacker obtaining full control of the device.

III. Solution

Upgrade

According to Cisco Security Advisory cisco-sa-20100707-snmp, the first fixed IOS releases is 12.2(55)SE, currently scheduled to be available August 2010.

Disable default SNMP community strings

Cisco Security Advisory cisco-sa-20100707-snmp provides detailed information about workarounds and mitigation techniques, including manually and automatically removing SNMP community strings.

Vendor Information

Vendor	Status	Date Notified	Date Updated
Cisco Systems, Inc.	Affected		2010-07-12

References

http://secunia.com/advisories/40407/
http://www.cisco.com/warp/public/707/cisco-sa-20100707-snmp.shtml

Credit

Information from Secunia and Cisco was used in this document.

This document was written by Michael Orlando.

Other Information

Date Public:	2010-07-07
Date First Published:	2010-07-12
Date Last Updated:	2010-07-12
CERT Advisory:
CVE-ID(s):	CVE-2010-1574
NVD-ID(s):	CVE-2010-1574
US-CERT Technical Alerts:
Metric:	5.93
Document Revision:	16