CVE-2015-4202

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-06-20 · updated 2026-06-17
Weakness: CWE-200

Description

Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.

Affected products

Cisco IOS: 12.2(33)sch, 12.2sch

References

http://tools.cisco.com/security/center/viewAlert.x?alertId=39432
http://www.securityfocus.com/bid/75321
http://www.securitytracker.com/id/1032678
http://tools.cisco.com/security/center/viewAlert.x?alertId=39432
http://www.securityfocus.com/bid/75321
http://www.securitytracker.com/id/1032678

Get alerted when CVE-2015-4202 or the next vulnerability affects your stack