{"id":"CVE-2015-4202","aliases":["EUVD-2015-4225","GHSA-4mf4-pwvw-5252"],"status":"published","title":"Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly...","description":"Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01774,"percentile":0.78334,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2015-06-20T14:00:00Z","modified":"2026-06-17T00:26:54Z","products":[{"vendor":"cisco","product":"ios"}],"references":[{"url":"http://www.securitytracker.com/id/1032678","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/75321","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://tools.cisco.com/security/center/viewAlert.x?alertId=39432","tags":["vendor-advisory","x_refsource_CISCO","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-4202"},{"url":"https://github.com/advisories/GHSA-4mf4-pwvw-5252"}],"sources":{"cve":[{"id":"CVE-2015-4202","description":"Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.","status":"published","published":"2015-06-20T14:00:00Z","modified":"2024-08-06T06:04:03.214Z","updated_at":"2026-11-02T14:35:43.322279Z"}],"euvd":[{"id":"EUVD-2015-4225","description":"Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.","status":"published","published":"2015-06-20T14:00:00Z","modified":"2024-08-06T06:04:03Z","updated_at":"2026-11-03T02:22:05.081899Z"}],"ghsa":[{"id":"GHSA-4mf4-pwvw-5252","title":"Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly...","description":"Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.","status":"published","published":"2022-05-17T03:13:41Z","modified":"2023-01-27T05:06:57Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:43:01.321842Z"}],"nvd":[{"id":"CVE-2015-4202","description":"Cisco IOS 12.2SCH on uBR10000 router Cable Modem Termination Systems (CMTS) does not properly restrict access to the IP Detail Record (IPDR) service, which allows remote attackers to obtain potentially sensitive MAC address and network-utilization information via crafted IPDR packets, aka Bug ID CSCua39203.","status":"published","published":"2015-06-20T14:59:01.947Z","modified":"2026-06-17T00:26:54.76Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:05.884985Z"}]}}