CVE-2017-5135

Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor formerly Cisco DPC3928SL with firmware D3928SL-P15-13-A386-c3420r55105-160127a could be reached by any SNMP community string from the Internet; also, you can writ...

SNMP Incorrect Access Control Vulnerability (CVE 2017-5135) (StringBleed)

In DEFCON 24 IoT Village i gave a talk about the danger of SNMP write properties enabled devices in the IoT, police patrols, ambulances and other in the “critical mission vehicles” were affected in that research. In December 2016 with a colleague from Argentina Ezequiel Fernandez we decided to...

Design/Logic Flaw

Cisco IOS 15.53M and 15.61T0a on Cisco 1000 Connected Grid routers allows remote authenticated users to cause a denial of service device reload via an SNMP request for unspecified BRIDGE MIB OIDs, aka Bug ID CSCux89878...

CVE-2016-1333

CVE-2016-1333 affects Cisco 1000 Series Connected Grid Routers running Cisco IOS 15.5(3)M and 15.6(1)T0a. A fault in the SNMP BRIDGE MIB handling allows an authenticated, remote attacker to trigger a denial-of-service resulting in a device reload by sending specific SNMP requests to BRIDGE MIB OI...

Cisco 1000 Series Connected Grid Routers SNMP BRIDGE MIB Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP BRIDGE Management Information Base MIB of the Cisco 1000 Series Connected Grid Routers could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a faulty implementation of...

net-snmp security and bug fix update

1:5.7.2-24 - Fixed lmSensorsTable not reporting sensors with duplicate names 1252053 - Fixed close overhead of extend commands 1252048 - Fixed out-of-bounds write in python code 1252034 1:5.7.2-23 - Fixed parsing of invalid variables in incoming packets 1248414 - Fixed...

Where can I download the MIB files for Monitoring CloudBridge Linux-based appliances?

QUESTION: Where can I download the MIB files for Monitoring CloudBridge Linux-based appliances? ANSWER: -On version 7.4.x and later you can download the MIB files from Configuration Appliance Settings SNMP -On versions prior 7.4.x you can download the MIB files from CloudBridge Configuration...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...

How to Obtain SNMP MIB File for NetScaler SDX Appliance

...

OracleVM 3.3 : net-snmp (OVMSA-2015-0099)

The remote OracleVM system is missing necessary patches to address critical security updates : - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 - Quicker loading of IP-MIB::ipAddrTable 1191393 - Quicker loading of IP-MIB::ipAddressTable 1191393 - Fixed snmptrapd crash when '-OQ' paramete...

net-snmp security and bug fix update

1:5.5-54.0.1 - Add Oracle ACFS to hrStorage John Haxby orabug 18510373 1:5.5-54 - Quicker loading of IP-MIB::ipAddrTable 1191393 1:5.5-53 - Quicker loading of IP-MIB::ipAddressTable 1191393 1:5.5-52 - Fixed snmptrapd crash when '-OQ' parameter is used and invalid trap is received CVE-2014-3565...

CentOS 6 : net-snmp (CESA-2015:1385)

Updated net-snmp packages that fix one security issue and several bugs are now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having Moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

RedHat Update for net-snmp RHSA-2015:1385-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : net-snmp (MDVSA-2015:092)

Updated net-snmp packages fix security vulnerabilities : Remotely exploitable denial of service vulnerability in Net-SNMP, in the Linux implementation of the ICMP-MIB, making the SNMP agent vulnerable if it is making use of the ICMP-MIB table objects CVE-2014-2284. Remotely exploitable denial of...

Path traversal vulnerability in EMC M&R (Watch4net) MIB Browser

------------------------------------------------------------------------ Path traversal vulnerability in EMC M&R Watch4net MIB Browser ------------------------------------------------------------------------ Han Sahin, November 2014...

EMC M&R (Watch4net) MIB Browser Path Traversal

------------------------------------------------------------------------ Path traversal vulnerability in EMC M&R Watch4net MIB Browser ------------------------------------------------------------------------ Han Sahin, November 2014...

SNMP System Description MIB Detection

Binary data 7145.pasl...

CVE-2014-3565

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service snmptrapd crash via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu...

CVE-2014-3565

CVE-2014-3565 affects net-snmp 5.7.0 and earlier. When SNMP traps are processed with -OQ, a remote attacker can cause snmptrapd to crash by sending a trap containing a NULL type (e.g., in an ifMtu trap). This yields a denial of service. The connected IBM/ADVISORY entries confirm the vulnerability...

UBUNTU-CVE-2014-3565

snmplib/mib.c in net-snmp 5.7.0 and earlier, when the -OQ option is used, allows remote attackers to cause a denial of service snmptrapd crash via a crafted SNMP trap message, which triggers a conversion to the variable type designated in the MIB file, as demonstrated by a NULL type in an ifMtu...