CVE-2006-4950

CVE-2006-4950 describes a critical vulnerability in Cisco IOS versions 12.2 through 12.4, affecting specific Cisco Integrated Access Devices, Analog Phone Gateways, and Mobile Wireless Edge Routers. The flaw stems from an incorrect identification of DOCSIS support, allowing remote attackers to exploit a hard-coded cable-docsis community string. This enables unauthorized read-write access to arbitrary SNMP variables, leading to complete compromise of confidentiality, integrity, and availability. With a CVSS score of 10.0, this vulnerability is easily exploitable over the network with low complexity and no authentication required. Despite its high severity, there is no public exploit intelligence, active exploitation, or significant community discussion reported.