Lucene search
+L

6514 matches found

OSV
OSV
added 2024/04/16 7:49 p.m.37 views

CVE-2022-24807 net-snmp: A malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. A user with read-write credentials can exploit the issue. Version 5.9....

6.5CVSS7.2AI score
SaveExploits0References11
AlpineLinux
AlpineLinux
added 2024/04/16 7:49 p.m.56 views

CVE-2022-24807

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. A user with read-write credentials can exploit the issue. Version 5.9....

6.5CVSS6.8AI score0.01008EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2024/04/16 7:49 p.m.51 views

CVE-2022-24807

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a malformed OID in a SET request to SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an out-of-bounds memory access. A user with read-write credentials can exploit the issue. Version 5.9....

6.5CVSS7.3AI score0.01008EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/04/16 7:44 p.m.36 views

CVE-2022-24806 net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...

6.5CVSS6.9AI score0.01052EPSS
SaveExploits0References6
OSV
OSV
added 2024/04/16 7:44 p.m.24 views

CVE-2022-24806 net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...

6.5CVSS7.1AI score
SaveExploits0References9
AlpineLinux
AlpineLinux
added 2024/04/16 7:44 p.m.47 views

CVE-2022-24806

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...

6.5CVSS6.8AI score0.01052EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2024/04/16 7:44 p.m.28 views

CVE-2022-24806 net-snmp vulnerable to Improper Input Validation when SETing malformed OIDs in master agent and subagent simultaneously

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-write credentials can exploit an Improper Input Validation vulnerability when SETing malformed OIDs in master agent and subagent simultaneously. Version 5.9.2 contains a...

6.5CVSS6.4AI score0.01052EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2024/04/16 7:37 p.m.24 views

CVE-2022-24805 net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...

6.5CVSS7.2AI score0.01299EPSS
SaveExploits0References8
AlpineLinux
AlpineLinux
added 2024/04/16 7:37 p.m.51 views

CVE-2022-24805

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...

8.8CVSS7.1AI score0.01299EPSS
SaveExploits0
CVE
CVE
added 2024/04/16 7:37 p.m.262 views

CVE-2022-24805

CVE-2022-24805 affects net-snmp prior to 5.9.2. The issue is a buffer overflow in handling the INDEX of NET-SNMP-VACM-MIB, allowing an out-of-bounds memory access to be triggered by a user with read-only credentials. Net-snmp 5.9.2 contains a patch. Public references consistently describe the vul...

8.8CVSS6.6AI score0.01299EPSS
SaveExploits0References8Affected Software1
Cvelist
Cvelist
added 2024/04/16 7:37 p.m.49 views

CVE-2022-24805 net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...

6.5CVSS7.2AI score0.01299EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2024/04/16 7:37 p.m.137 views

CVE-2022-24805

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...

8.8CVSS8AI score0.01299EPSS
SaveExploits0
OSV
OSV
added 2024/04/16 7:37 p.m.32 views

CVE-2022-24805 net-snmp: A buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of NET-SNMP-VACM-MIB can cause an out-of-bounds memory access. A user with read-only credentials can exploit the issue. Version 5.9.2 contains...

6.5CVSS7.7AI score
SaveExploits0References11
Citrix
Citrix
added 2024/04/04 12:00 a.m.10 views

SNMP trap events are not logged after "set snmp alarm **** -logging ENABLED"

SNMP trap events are not logged after "set snmp alarm -logging ENABLED" configured...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2024/04/03 12:00 a.m.22 views

Westermo Lynx Cross-site Scripting (CVE-2023-42765)

An attacker with access to the vulnerable software could introduce arbitrary JavaScript by injecting a cross-site scripting payload into the 'username' parameter in the SNMP configuration. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

5.4CVSS5.9AI score0.00294EPSS
SaveExploits0References3
OSV
OSV
added 2024/03/13 5:15 p.m.10 views

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS5.8AI score0.0025EPSS
SaveExploits0References1
NVD
NVD
added 2024/03/13 5:15 p.m.38 views

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS4.8AI score0.0025EPSS
SaveExploits0References1
Prion
Prion
added 2024/03/13 5:15 p.m.21 views

Code injection

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

3.3CVSS7.3AI score0.0025EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/03/13 4:47 p.m.40 views

CVE-2024-20319

A vulnerability in the UDP forwarding code of Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to bypass configured management plane protection policies and access the Simple Network Management Plane SNMP server of an affected device. This vulnerability is due to incorrect...

4.3CVSS5.2AI score0.0025EPSS
SaveExploits0References1
CVE
CVE
added 2024/03/13 4:47 p.m.89 views

CVE-2024-20319

Cisco IOS XR Software contains a UDP forwarding code vulnerability that can allow an unauthenticated, adjacent attacker to bypass management plane protection and reach the SNMP server when SNMP is used with management plane protection. The issue arises from incorrect UDP forwarding when handling ...

4.3CVSS4.8AI score0.0025EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder