CVE-2017-11589

On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway…

published July 24, 2017

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky lack of access control on a handful of sensitive commands could leave your Cisco DDR2200 devices vulnerable to prying eyes! Think of it like a restaurant where the chef leaves the kitchen door wide open, allowing anyone to stroll in and peek at the secret recipes without a single question asked. Yikes! An attacker could easily access sensitive system information such as network statistics and device configurations — all without needing any special credentials. This could lead to unwanted changes or expose your network to further attacks, putting your entire setup at risk.

Put simply

Think of it like a restaurant where the chef leaves the kitchen door wide open, allowing anyone to stroll in and peek at the secret recipes without a single question asked. Yikes! This vulnerability stems from missing access controls on multiple device configuration commands, which means unauthorized users can execute these commands without any authentication, potentially exposing sensitive information.

What to do

An attacker could easily access sensitive system information such as network statistics and device configurations — all without needing any special credentials. This could lead to unwanted changes or expose your network to further attacks, putting your entire setup at risk. To protect your network, check for firmware updates from Cisco and apply them as soon as possible. Additionally, consider implementing network segmentation or firewall rules to limit access to these vulnerable devices. You've got this! With a few quick steps, you can bolster your defenses and keep your network safe. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01387 · 72.0th percentile
Published
2017-07-24T00:00Z
EPSS history
Timeline
  • 24 JUL 00:00Z
    On Cisco DDR2200 ADSL2+ Residential Gateway DDR2200B-NA-AnnexA-FCC-V00.00.03.45.4E and DDR2201v1 ADSL2+ Residential Gateway…
    cvelistv5