Secunia

A vulnerability has been reported in Cisco IOS, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is due to an error, which inadvertently enables an additional read-write community string for DOCSIS-compliant cable-capable devices when the device is configured for SNMP management. This may be exploited to gain full control of the device.

The vulnerability has been reported in the following devices running Cisco IOS:
* Cisco IAD2430 Integrated Access Device
* Cisco IAD2431 Integrated Access Device
* Cisco IAD2432 Integrated Access Device
* Cisco VG224 Analog Phone Gateway
* Cisco MWR 1900 Mobile Wireless Edge Router
* Cisco MWR 1941 Mobile Wireless Edge Router

Solution
Fixes are available (see patch matrix in vendor advisory).
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20060920-docsis.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area