CVE-2006-4950 in the critical feed json
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Pho…
published 2006-09-23 20 y ago modified 2026-06-16 4 mo ago also EUVD-2006-4936
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 6.0%
- EPSS 6.0% chance of exploitation in 30 days, percentile 93%
- public exploits
- 0
- none known
Summary
Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.
Patch / fix
Exploit prediction
5.97% chance of exploitation in the next 30 days, higher than 93% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Technology feeds
References
-
cisco.com
/warp/public/707/cisco-sa-20060920-docsis.shtml
vendor-advisory, patch
-
secunia.com
/advisories/21974
third-party-advisory, patch, vendor-advisory
-
securityfocus.com
/bid/20125
vdb-entry, patch
-
securitytracker.com
/id?1016899
vdb-entry
-
vupen.com
/english/advisories/2006/3722
vdb-entry
-
oval.cisecurity.org
/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5665
vdb-entry, signature
-
kb.cert.org
/vuls/id/123140
third-party-advisory, us-government-resource
-
exchange.xforce.ibmcloud.com
/vulnerabilities/29054
vdb-entry
-
osvdb.org
/29034
vdb-entry
Sources
- CVE List CVE-2006-4950
- NVD CVE-2006-4950
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.