CVE-2010-1574

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-07-08 · updated 2026-06-16
Weakness: CWE-264

Description

IOS 12.2(52)SE and 12.2(52)SE1 on Cisco Industrial Ethernet (IE) 3000 series switches has (1) a community name of public for RO access and (2) a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SNMP requests, aka Bug ID CSCtf25589.

Affected products

Cisco Industrial Ethernet 3000: all versions
Cisco IOS: 12.2(52)se, 12.2(52)se1

References

http://osvdb.org/66120
http://secunia.com/advisories/40407
http://securitytracker.com/id?1024173
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3891f.shtml
http://www.kb.cert.org/vuls/id/732671
http://www.securityfocus.com/bid/41436
http://www.vupen.com/english/advisories/2010/1754
https://exchange.xforce.ibmcloud.com/vulnerabilities/60145
http://osvdb.org/66120
http://secunia.com/advisories/40407
http://securitytracker.com/id?1024173
http://www.cisco.com/en/US/products/products_security_advisory09186a0080b3891f.shtml

Get alerted when CVE-2010-1574 or the next vulnerability affects your stack