CVE-2002-2112 RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP acce...
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RCA Digital Cable Modem DCM225 and DCM225E, and other modems that must conform to the Data-over-Cable Service Interface Specifications DOCSIS standard, uses the "public" community string for SNMP access, which allows remote attackers to read or write MIB information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rca digital cable modem | = dcm225 | No fix listed |
| rca digital cable modem | = dcm225e | No fix listed |
References
- 20020327 RCA cable modem Deny of Service mailing-list
- 20020327 Re: RCA cable modem Deny of Service mailing-list
- rca-cablemodem-snmp-public(8662) vdb-entry
- 4377 vdb-entry