CVE-2006-4950

CRITICAL

Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge...

Affects 1 product across 1 vendor.

CVSS 2.010.0
EPSS5.9%
Percentile93th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2006. A critical vulnerability affects Cisco systems (CVE-2006-4950). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2006-GLOBAL-339913-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2006-4950?
This vulnerability was disclosed in 2006. A critical vulnerability affects Cisco systems (CVE-2006-4950). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2006-4950?
CVE-2006-4950 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 5.9%.
Is CVE-2006-4950 actively exploited?
No confirmed active exploitation of CVE-2006-4950 as of 2026-09-25.
How do I remediate CVE-2006-4950?
Priority: MEDIUM. Advisory: http://secunia.com/advisories/21974 PSIRT: [email protected]
What systems are affected by CVE-2006-4950?
CVE-2006-4950 affects Cisco Ios.
Vulnerability Details
CVE IDCVE-2006-4950
BSIDBS-2006-GLOBAL-339913-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2006-09-23
Last Modified2026-06-16
ICS Relevance55%
Domains
NETWORK-INFRA
SourceNVD
Official Description

Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: Cisco IOS 12.2 through 12.4 before 20060920, as used by Cisco IAD2430, IAD2431, and IAD2432 Integrated Access Devices, the VG224 Analog Phone Gateway, and the MWR 1900 and 1941 Mobile Wireless Edge Routers, is incorrectly identified as supporting DOCSIS, which allows remote attackers to gain read-write access via a hard-coded cable-docsis community string and read or modify arbitrary SNMP variables. CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Cisco Ios 12.3(1a) 12.3(2)ja 12.3(2)ja5 12.3(2)jk 12.3(2)jk1 12.3(2)t3
+222 more12.3(2)t8 12.3(2)xa4 12.3(2)xa5 12.3(2)xc1 12.3(2)xc2 12.3(2)xc3 12.3(2)xc4 12.3(2)xe3 12.3(2)xe4 12.3(3e) 12.3(3h) 12.3(3i) 12.3(4)eo1 12.3(4)ja 12.3(4)ja1 12.3(4)t 12.3(4)t1 12.3(4)t2 12.3(4)t3 12.3(4)t4 12.3(4)t8 12.3(4)tpc11a 12.3(4)xd 12.3(4)xd1 12.3(4)xd2 12.3(4)xe4 12.3(4)xg1 12.3(4)xg2 12.3(4)xg4 12.3(4)xg5 12.3(4)xh 12.3(4)xk 12.3(4)xk1 12.3(4)xk3 12.3(4)xk4 12.3(4)xq 12.3(4)xq1 12.3(5) 12.3(5)b1 12.3(5a) 12.3(5a)b 12.3(5a)b2 12.3(5a)b5 12.3(5b) 12.3(5c) 12.3(5e) 12.3(5f) 12.3(6) 12.3(6a) 12.3(6d) 12.3(6e) 12.3(6f) 12.3(7.7) 12.3(7)ja 12.3(7)ja1 12.3(7)jx 12.3(7)t 12.3(7)t4 12.3(7)t8 12.3(7)t9 12.3(7)t10 12.3(7)t12 12.3(7)xi3 12.3(7)xi4 12.3(7)xi7 12.3(7)xr3 12.3(7)xr4 12.3(7)xr6 12.3(8)ja 12.3(8)ja1 12.3(8)t4 12.3(8)t7 12.3(8)t8 12.3(8)t9 12.3(8)t11 12.3(8)xu2 12.3(8)xy4 12.3(8)xy5 12.3(8)xy6 12.3(8)ya1 12.3(8)yd 12.3(8)yf 12.3(8)yg 12.3(8)yg1 12.3(8)yg2 12.3(8)yg3 12.3(8)yh 12.3(8)yi 12.3(8)yi1 12.3(8)yi3 12.3(9) 12.3(9a)bc 12.3(9a)bc2 12.3(9a)bc6 12.3(9a)bc7 12.3(9d) 12.3(9e) 12.3(10) 12.3(10c) 12.3(10d) 12.3(10e) 12.3(11) 12.3(11)t 12.3(11)t4 12.3(11)t5 12.3(11)t6 12.3(11)t8 12.3(11)t9 12.3(11)xl 12.3(11)xl3 12.3(11)yf 12.3(11)yf2 12.3(11)yf3 12.3(11)yf4 12.3(11)yj 12.3(11)yk 12.3(11)yk1 12.3(11)yk2 12.3(11)yl 12.3(11)yn 12.3(11)yr 12.3(11)ys 12.3(11)ys1 12.3(11)yw 12.3(12) 12.3(12b) 12.3(12e) 12.3(13) 12.3(13a) 12.3(13a)bc 12.3(13a)bc1 12.3(13b) 12.3(14)t 12.3(14)t2 12.3(14)t4 12.3(14)t5 12.3(14)ym4 12.3(14)yq 12.3(14)yq1 12.3(14)yq3 12.3(14)yq4 12.3(14)yt 12.3(14)yt1 12.3(14)yu 12.3(14)yu1 12.3(15) 12.3(15b) 12.3(16) 12.3b 12.3bc 12.3bw 12.3j 12.3ja 12.3jk 12.3jx 12.3t 12.3tpc 12.3xa 12.3xb 12.3xc 12.3xd 12.3xe 12.3xf 12.3xg 12.3xh 12.3xi 12.3xj 12.3xk 12.3xl 12.3xm 12.3xn 12.3xq 12.3xr 12.3xs 12.3xt 12.3xu 12.3xv 12.3xw 12.3xx 12.3xy 12.3xz 12.3ya 12.3yb 12.3yc 12.3yd 12.3ye 12.3yf 12.3yg 12.3yh 12.3yi 12.3yj 12.3yk 12.3yl 12.3ym 12.3yn 12.3yq 12.3yr 12.3ys 12.3yt 12.3yu 12.3yw 12.3yx 12.4 12.4(1) 12.4(1b) 12.4(1c) 12.4(2)mr 12.4(2)mr1 12.4(2)t 12.4(2)t1 12.4(2)t2 12.4(2)xa 12.4(2)xb 12.4(3a) 12.4(3b) 12.4(4)t 12.4(5) 12.4mr 12.4t 12.4xa 12.4xb ≤ 12.3
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 7327 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash15f8cecdaa51da2bcc74c490ac2b05b25eb265aa047a81de62292696fb2d117af9bb7cc583d069f5c18448763d850e2400d5aedd77293fd42633ba4cf269df49
Related CVEs affecting Cisco
CVE-2009-1167 10.0 Unspecified vulnerability on the Cisco Wireless LAN Controller (WLC) platform... CVE-2008-0532 10.0 Multiple buffer overflows in securecgi-bin/CSuserCGI.exe in User-Changeable P... CVE-2007-2036 10.0 The SNMP implementation in the Cisco Wireless LAN Controller (WLC) before 200... CVE-2008-1157 10.0 Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 creates a process... CVE-2000-1054 10.0 Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlie...
View all Cisco CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →