Information disclosure in Cisco Ios

CVE-2015-4202

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-uti…

Vulnerability class: Information Disclosure

EPSS: 0.018 (76.4th percentile) — read the EPSS interpretation.

Affected products

Cisco Ios — versions 12.2\(33\)sch, 12.2sch
Cisco Ubr10000_cable_modem_termination_system
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_SECTRACK)
psirt@cisco.com (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
psirt@cisco.com (x_refsource_CISCO, vendor-advisory, Vendor Advisory)