UBUNTU-CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

Advantech iView SQL注入漏洞

Advantech Iview, a software based on Simple Network Protocol SNMP for managing B B SmartWorx devices from Advantech, China, is vulnerable to a SQL injection vulnerability in Advantech iView, which stems from a special element used in SQL commands that is not neutralized. An unauthorized attacker...

CVE-2022-22276

A vulnerability in SonicOS SNMP service resulting exposure of sensitive information to an unauthorized user...

CVE-2022-20684

A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause an affected device to unexpectedly reload, resulting in a denial of...

VulnCheck KEV: CVE-2017-6744

The Simple Network Management Protocol SNMP subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a...

VulnCheck KEV: CVE-2018-0161

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software running on certain models of Cisco Catalyst Switches could allow an authenticated, remote attacker to cause a denial-of-service DoS condition...

CVE-2021-34794

A vulnerability in the Simple Network Management Protocol version 3 SNMPv3 access control functionality of Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to query SNMP data. This vulnerability is due t...

CVE-2020-12141

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose information via crafted SNMP packets to snmpberdecodestringlenbuffer in os/net/app-layer/snmp/snmp-ber.c...

CVE-2021-1623

A vulnerability in the Simple Network Management Protocol SNMP punt handling function of Cisco cBR-8 Converged Broadband Routers could allow an authenticated, remote attacker to overload a device punt path, resulting in a denial of service DoS condition. This vulnerability is due to the punt path...

CVE-2021-38412

Properly formatted POST requests to multiple resources on the HTTP and HTTPS web servers of the Digi PortServer TS 16 Rack device do not require authentication or authentication tokens. This vulnerability could allow an attacker to enable the SNMP service and manipulate the community strings to...

Cisco Firepower Threat Defense Software SNMP DoS (cisco-sa-ftd-snmp-dos-R8ENPbOs)

According to its self-reported version, Cisco Firepower Threat Defense Software is affected by a vulnerability in the Simple Network Management Protocol SNMP input packet processor that could allow an unauthenticated, remote attacker to cause an affected device to restart unexpectedly. The...

Cisco SD-WAN 输入验证错误漏洞

Cisco SD-WAN vEdge is a router from Cisco. Cisco SD-WAN vManage is a software that provides software-defined networking capabilities from Cisco. The software provides a way to virtualize the network. A buffer overflow vulnerability exists in several Cisco SD-WAN products. The vulnerability stems...

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Important: Red Hat Security Advisory: net-snmp security update

An update for net-snmp is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

The vulnerability of the Simple Network Management Protocol (SNMP) packet processor in Cisco IOS XE operating systems of Cisco Catalyst 9000 Series network devices allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol SNMP packet processor in Cisco IOS XE operating systems for Cisco Catalyst 9000 Series network devices is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service...

CVE-2020-3390 Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family SNMP Trap Denial of Service Vulnerability

A vulnerability in Simple Network Management Protocol SNMP trap generation for wireless clients of the Cisco IOS XE Wireless Controller Software for the Cisco Catalyst 9000 Family could allow an unauthenticated, adjacent attacker to cause the device to unexpectedly reload, causing a denial of...

The vulnerability of the Simple Network Management Protocol (SNMP) implementation in the software-based networking devices of the Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM allows a attacker to induce a service failure.

The vulnerability of the Simple Network Management Protocol SNMP implementation in the microsoftware for Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM is related to data processing errors. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Cisco IOS and IOS XE Code Issue Vulnerabilities

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A code issue vulnerability exists in the Simple Network Management Protocol SNMP subsystem of the IOS Software and IOS XE Software in the Cisco Catalyst 4500 Series, which arises from a program that do...

Cisco ASR 920 Series Aggregation Services Router ASR920-12SZ-IM Code Issue Vulnerability

The Cisco ASR 920 Series Aggregation Services Router ASR920-12SZ-IM is a 920 Series Aggregation Services Router from Cisco. A code issue vulnerability exists in the Simple Network Management Protocol SNMP implementation in the Cisco ASR 920 Series Aggregation Services Router ASR920-12SZ-IM, which...

Race condition

A vulnerability in the Simple Network Management Protocol SNMP implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is return...