CVE-2002-1706

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2002-12-31 · updated 2026-06-16
Weakness: CWE-347

Description

Cisco IOS software 11.3 through 12.2 running on Cisco uBR7200 and uBR7100 series Universal Broadband Routers allows remote attackers to modify Data Over Cable Service Interface Specification (DOCSIS) settings via a DOCSIS file without a Message Integrity Check (MIC) signature, which is approved by the router.

Affected products

Cisco IOS: from 11.3 through 12.2

References

http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml
http://www.securityfocus.com/bid/5041
https://exchange.xforce.ibmcloud.com/vulnerabilities/9368
http://www.cisco.com/warp/public/707/cmts-MD5-bypass-pub.shtml
http://www.securityfocus.com/bid/5041
https://exchange.xforce.ibmcloud.com/vulnerabilities/9368

Get alerted when CVE-2002-1706 or the next vulnerability affects your stack