Authentication flaw

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

MDVA-2010:184 : net-snmp

It was discovered that the snmpd daemon could segfault with certain configuration options. The updated packages addresses this problem. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Netwo...

CVE-2010-2976

The controller in Cisco Unified Wireless Network UWN Solution 7.x through 7.0.98.0 has 1 a default SNMP read-only community of public, 2 a default SNMP read-write community of private, and a value of "default" for the 3 SNMP v3 username, 4 SNMP v3 authentication password, and 5 SNMP v3 privacy...

CVE-2010-2982

Cisco Unified Wireless Network UWN Solution 7.x before 7.0.98.0 allows remote attackers to discover a group password via a series of SNMP requests, as demonstrated by an SNMP walk, aka Bug ID CSCtb74037...

CVE-2010-2976

CVE-2010-2976 affects Cisco Unified Wireless Network (UWN) Solution controllers on 7.x up to 7.0.98.0. The issue arises from default SNMP configurations: read-only community set to public, read-write community set to private, and default SNMPv3 username/passwords. This insecure default enables re...

CVE-2010-2982

CVE-2010-2982 affects Cisco Unified Wireless Network (UWN) Solution 7.x, prior to 7.0.98.0. The vulnerability enables remote attackers to discover a group password by issuing a series of SNMP requests (as demonstrated by an SNMP walk), per Bug ID CSCtb74037. Root cause involves insecure SNMP hand...

CVE-2010-2705

Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors...

Code injection

Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors...

[security bulletin] HPSBGN02501 SSRT071407 rev.1 - HP ProCurve 1800 Switches running SNMP, Remote Disclosure of Information

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02436028 Version: 1 HPSBGN02501 SSRT071407 rev.1 - HP ProCurve 1800 Switches running SNMP, Remote Disclosure of Information NOTICE: The information in this Security Bulletin should be acted upon ...

CVE-2010-2705

The CVE-2010-2705 entry corresponds to HP ProCurve 1800 switches (24G, PB.03.02 and earlier; 8G, PA.03.02 and earlier) with SNMP enabled, allowing remote disclosure of information via unknown vectors. Connected documents provide concrete details: affected products and software versions, vulnerabi...

CVE-2010-2705

Unspecified vulnerability on the HP ProCurve 1800-24G switch with software PB.03.02 and earlier, and the ProCurve 1800-8G switch with software PA.03.02 and earlier, when SNMP is enabled, allows remote attackers to obtain sensitive information via unknown vectors...

Cisco IOS Version

The remote host is running IOS, an operating system for Cisco routers. It is possible to read the IOS version number by connecting to the router via SSH or by using SNMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid47864; scriptversion"1.39";...

HP-UX PHSS_39886 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)

s700800 11.X OV EMANATE15.3 PA-RISC Consolidated Patch 6 : A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows. The vulnerability could be exploited remotely to gain unauthorized access. %NASLMINLEVEL 70300 C Tenab...

HP-UX PHSS_39887 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)

s700800 11.X OV EMANATE15.3 IA-64 Consolidated Patch 6 : A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows. The vulnerability could be exploited remotely to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable...

US-CERT Warns of Cisco Ethernet-Switch Vulnerability

Cisco Industrial Ethernet 3000 IE 3000 Series switches contain well-known, hard-coded read and write SNMP community strings. An remote attacker could take full control of a vulnerable device. Read the full statement. US-CERT...

Cisco Industrial Ethernet 3000 Series switches have hardcoded SNMP community strings

Overview Cisco Industrial Ethernet 3000 IE 3000 Series switches running Cisco IOS Software releases 12.252SE or 12.252SE1, contain well-known, hard-coded read and write SNMP community strings. An remote attacker could take full control of a vulnerable device. Description Cisco Industrial Ethernet...

Cisco Industrial Ethernet 3000 switches unauthorized access

Undeletable SNMP communities public and private...

Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Hard-Coded SNMP Community Names in Cisco Industrial Ethernet 3000 Series Switches Vulnerability Advisory ID: cisco-sa-20100707-snmp Revision 1.0 For Public Release 2010 July 07 1600 UTC GMT...

Code injection

IOS 12.252SE and 12.252SE1 on Cisco Industrial Ethernet IE 3000 series switches has 1 a community name of public for RO access and 2 a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SN...

CVE-2010-1574

IOS 12.252SE and 12.252SE1 on Cisco Industrial Ethernet IE 3000 series switches has 1 a community name of public for RO access and 2 a community name of private for RW access, which makes it easier for remote attackers to modify the configuration or obtain potentially sensitive information via SN...