A security issue has been reported in Cisco Industrial Ethernet 3000, which can be exploited by malicious people to potentially compromise a vulnerable device.

The security issue is caused due to the restoring of hardcoded read-write SNMP community names to the running configuration after a device reload. This can be exploited to e.g. gain full control of the device.

Successful exploitation requires that the SNMP service is enabled (disabled by default).

The security issue is reported in Cisco IOS Software release 12.2(52)SE and 12.2(52)SE1.

Solution
Update to Cisco IOS 12.2(55)SE which is scheduled to be available August 2010.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.cisco.com/warp/public/707/cisco-sa-20100707-snmp.shtml

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area