CVE-2006-3595

The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.cisco.com/warp/public/707/cisco-sa-20060712-crws.shtml	Patch
http://www.securityfocus.com/bid/18953
http://secunia.com/advisories/21028	Vendor Advisory
http://www.kb.cert.org/vuls/id/205225	US Government Resource
http://securitytracker.com/id?1016476
http://www.osvdb.org/27159
http://www.vupen.com/english/advisories/2006/2773
https://exchange.xforce.ibmcloud.com/vulnerabilities/27688
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5826

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:cisco:router_web_setup:3.3.0_build_30:*:*:*:*:*:*:*

Information

Published : 2006-07-18 08:37

Updated : 2017-10-10 18:31

NVD link : CVE-2006-3595

Mitre link : CVE-2006-3595

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

cisco

router_web_setup

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.cisco.com/warp/public/707/cisco-sa-20060712-crws.shtml", "name": "20060712 Cisco Router Web Setup Ships with Insecure Default IOS Configuration", "tags": ["Patch"], "refsource": "CISCO"}, {"url": "http://www.securityfocus.com/bid/18953", "name": "18953", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/21028", "name": "21028", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.kb.cert.org/vuls/id/205225", "name": "VU#205225", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://securitytracker.com/id?1016476", "name": "1016476", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.osvdb.org/27159", "name": "27159", "tags": [], "refsource": "OSVDB"}, {"url": "http://www.vupen.com/english/advisories/2006/2773", "name": "ADV-2006-2773", "tags": [], "refsource": "VUPEN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27688", "name": "cisco-crws-command-execution(27688)", "tags": [], "refsource": "XF"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5826", "name": "oval:org.mitre.oval:def:5826", "tags": [], "refsource": "OVAL"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The default configuration of IOS HTTP server in Cisco Router Web Setup (CRWS) before 3.3.0 build 31 does not require credentials, which allows remote attackers to access the server with arbitrary privilege levels, aka bug CSCsa78190."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-3595", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2006-07-18T15:37Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:cisco:router_web_setup:3.3.0_build_30:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-10-11T01:31Z"}