DEBIAN-CVE-2024-42332

The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attac...

PT-2024-29280 · Unknown · Contiki-Ng

Name of the Vulnerable Software and Affected Versions: Contiki-NG affected versions not specified Description: An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The issue exists in the...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is a Contiki-NG open source operating system for resource-constrained devices in the Internet of Things. A buffer error vulnerability exists in Contiki-NG that originates from a 1-byte out-of-bounds read that may be triggered when sending a packet to a device running the SNMP-enabled...

PT-2024-9486 · Advantech · Advantech Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: A security issue was discovered in the snmp apply API, where multiple...

PT-2024-10735 · Epson · Epson Expression Home Xp255

Name of the Vulnerable Software and Affected Versions: Epson Expression Home XP255 version 20.08.FM10I8 Description: An issue was discovered that allows all values to be read with the SNMPv1 public community, and with the epson community, all the changeable values can be written/updated. This can...

CVE-2024-47505

An Allocation of Resources Without Limits or Throttling vulnerability in the PFE management daemon evo-pfemand of Juniper Networks Junos OS Evolved allows an authenticated, network-based attacker to cause an FPC crash leading to a Denial of Service DoS.When specific SNMP GET operations or specifi...

net-snmp: A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference.

A flaw was found in net-snmp. A malformed OID in a SET to the nsVacmAccessTable can cause a NULL pointer dereference issue...

PT-2024-7197 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: JunOS Evolved affected versions not specified Description: The issue is related to an unbounded resource allocation in the PFE management daemon evo-pfemand of JunOS Evolved operating systems. An attacker, acting remotely, can exploit this...

PT-2024-21074 · Infinera · Infinera Tnms Server

Name of the Vulnerable Software and Affected Versions: Infinera TNMS Server version 19.10.3 Description: The issue allows attackers with access to the database or exported configuration files to obtain SNMP users' usernames and passwords in cleartext. This occurs due to the cleartext storage of...

CVE-2024-8452

Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially...

PT-2024-39022 · Planet Technology · Planet Technology Switch

Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns the use of obsolete algorithms for authentication and encryption protocols in the SNMPv3 service, potentially allowing attackers to obtain plainte...

net-snmp: A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference.

A flaw was found in net-snmp. A malformed OID in a GET-NEXT to the nsVacmAccessTable can cause a NULL pointer dereference issue...

PT-2024-15290 · Pure Storage · Flasharray +1

Name of the Vulnerable Software and Affected Versions: FlashArray and FlashBlade Purity affected versions not specified Description: A condition exists in FlashArray and FlashBlade Purity whereby a malicious user could execute arbitrary commands remotely through a specifically crafted SNMP...

FlashArray和FlashBlade 安全漏洞

Pure Storage FlashArray and Pure Storage FlashBlade are both products of Pure Storage, U.S.A. Pure Storage FlashArray is an all QLC flash storage array.Pure Storage FlashBlade is a consolidated storage platform for file and object Pure Storage FlashBlade is a consolidated storage platform for fil...

The vulnerability of the snmp_facts module in the Ansible configuration management system arises from insufficient protection of registration data, allowing attackers to access confidential information.

The vulnerability of the snmpfacts module in the Ansible configuration management system is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to access confidential information...

CVE-2024-43388

A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation...

PHOENIX CONTACT FL/TC MGUARD 代码注入漏洞

The PHOENIX CONTACT FL/TC MGUARD is a series of routers from PHOENIX CONTACT, Germany. A code injection vulnerability exists in the PHOENIX CONTACT FL/TC MGUARD that originates from improper input validation, which allows a low-privileged remote attacker with write access to reconfigure the SNMP...

PT-2024-30548 · Mguard · Mguard

Name of the Vulnerable Software and Affected Versions: mGuard devices versions prior to firmware 8.9.3 or 10.4.1 Description: A low privileged remote attacker with write permissions can reconfigure the SNMP service due to improper input validation. This issue allows hackers to access confidential...

The vulnerability of the handle_ipv6IpForwarding() function in the Net-SNMP software suite for the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the handleipv6IpForwarding function in the Net-SNMP software suite for the Linux operating system is related to a NULL Pointer Exception issue. This exception can be exploited by an attacker through a specially created UDP packet to cause a service failure. Exploiting this...

The vulnerability of the NET-SNMP-VACM-MIB() function in the Net-SNMP software suite for the Linux operating system allows a attacker to compromise the integrity of the system.

The vulnerability of the NET-SNMP-VACM-MIB function in the Net-SNMP software suite for the Linux operating system is related to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the system...