PT-2016-4821
CVE-2016-1473
·
Published
2016-09-02
·
Updated
2017-08-13
Description by
CVSS 3.1
10
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Cisco Small Business 220 devices with firmware before 1.0.1.1
Description
The issue concerns a hardcoded SNMP community in the affected devices, allowing remote attackers to read or modify SNMP objects by leveraging knowledge of this community.
Recommendations
For Cisco Small Business 220 devices with firmware before 1.0.1.1, update the firmware to version 1.0.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to SNMP to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾