CVE-2010-1574 Hardcoded credentials in n/a
Remote attackers can modify configuration or read sensitive data on Cisco IE 3000 switches due to default SNMP community strings.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2010-1574?
CVE-2010-1574 is a critical vulnerability in Cisco Ios, published on 8 Jul 2010. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589.
Weakness: CWE-264
Which versions are affected by CVE-2010-1574?
It affects 2 products.
Products include Cisco Industrial Ethernet 3000, Cisco Ios.
How do I fix CVE-2010-1574?
No fix has been published for CVE-2010-1574 yet. Limit exposure of the affected software until one is available.
Is CVE-2010-1574 being exploited?
There is no known exploitation of CVE-2010-1574 in the wild and no public exploit code.
Sources
Also known as GHSA-hqc8-q9j9-3wxj.