6513 matches found
CVE-2024-55547
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547 Remote Command Execution via SNMP
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547 Remote Command Execution via SNMP
SNMP objects in NET-SNMP used in ORing IAP-420 allows Command Injection. This issue affects IAP-420: through 2.01e...
CVE-2024-55547
CVE-2024-55547 describes a command-injection vulnerability in NET-SNMP used by ORing IAP-420 via SNMP objects. Affected product is ORing IAP-420 (firmware up to 2.01e). Root cause: SNMP objects in NET-SNMP enable command execution; impact is manifested as remote command execution with high confid...
ORing IAP-420 安全漏洞
The ORing IAP-420 is a wireless access point from ORing. A security vulnerability exists in the ORing IAP-420 version 2.01e and prior versions that stems from an SNMP object in the used NET-SNMP that allows command injection...
Cisco NX-OS Resource Management Errors (CVE-2015-6308)
Cisco NX-OS 6.02U60.46 on N3K devices allows remote authenticated users to cause a denial of service temporary SNMP outage via an SNMP request for an OID that does not exist, aka Bug ID CSCuw36684. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot fo...
Cisco IP Phone 7920 SNMP Information Disclosure (CVE-2005-3803)
Cisco IP Phone VoIP 7920 1.08 contains certain hard-coded fixed public and private SNMP community strings that cannot be changed, which allows remote attackers to obtain sensitive information. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...
Eaton 9PX Insufficiently Protected Credentials (CVE-2018-9280)
An issue was discovered on Eaton UPS 9PX 8000 SP devices. The appliance discloses the SNMP version 3 user's password. The web page displayed by the appliance contains the password in cleartext. Passwords of the read and write users could be retrieved by browsing the source code of the webpage. Th...
Cisco NX-OS Improper Input Validation (CVE-2018-0456)
A vulnerability in the Simple Network Management Protocol SNMP input packet processor of Cisco NX-OS Software could allow an authenticated, remote attacker to cause the SNMP application of an affected device to restart unexpectedly. The vulnerability is due to improper validation of SNMP protocol...
SUSE CVE-2024-36468
The reported vulnerability is a stack buffer overflow in the zbxsnmpcachehandleengineid function within the Zabbix server/proxy code. This issue occurs when copying data from session-securityEngineID to localrecord.engineid without proper bounds checking...
CVE-2024-41126
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...
CVE-2024-41125
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...
CVE-2024-41125
CVE-2024-41125 affects Contiki-NG. An out-of-bounds read of 1 byte can occur when processing SNMP packets in the SNMP BER decoder, specifically in os/net/app-layer/snmp/snmp-ber.c within the function snmp_ber_decode_string_len_buffer, where a byte is read without verifying the buffer has another ...
CVE-2024-41125 Out-of-bounds read in SNMP when decoding a string in Contiki-NG
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...
CVE-2024-41125 Out-of-bounds read in SNMP when decoding a string in Contiki-NG
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...
CVE-2024-41126 Out-of-bounds read when decoding SNMP messages in Contiki-NG
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...
CVE-2024-41126
Summary (CVE-2024-41126) Contiki-NG exposes a 1-byte out-of-bounds read in SNMP message handling. The vulnerability resides in os/net/app-layer/snmp/snmp-message.c within snmp_message_decode, which fails to bound-check the message buffer immediately after decoding an OID. Impact is limited to dev...
CVE-2024-41126 Out-of-bounds read when decoding SNMP messages in Contiki-NG
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The...
CVE-2024-42332
The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attac...
CVE-2024-42332
The researcher is showing that due to the way the SNMP trap log is parsed, an attacker can craft an SNMP trap with additional lines of information and have forged data show in the Zabbix UI. This attack requires SNMP auth to be off and/or the attacker to know the community/auth details. The attac...