262 matches found
The vulnerability of the Simple Network Management Protocol (SNMP) subsystem of the Cisco IOS operating system, which allows a hacker to inject code or trigger a system reboot.
Many vulnerabilities in the Simple Network Management Protocol SNMP subsystem of the Cisco IOS operating system are caused by buffer overflows. Exploitation of these vulnerabilities allows a malicious actor to inject code into the system or cause it to restart by sending specially created SNMP...
Cisco IOS XE SNMP Packet Handling Remote Buffer Overflow Multiple RCE (cisco-sa-20170629-snmp)
According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by multiple remote code execution vulnerabilities in the Simple Network Management Protocol SNMP subsystem due to multiple buffer overflow conditions. An unauthenticated,...
PT-2017-2507 · Cisco · Cisco Ios +1
Name of the Vulnerable Software and Affected Versions: Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6 Cisco IOS XE versions 2.2 through 3.17 Description: The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could...
BSA-2017-316
Security Advisory ID : BSA-2017-316 Component : SNMP Revision : 1.0: Interim In SNMP version 1 & 2 authentication should only accept the value stored in the SNMP agent authentication mechanism. With this vulnerability an attacker can use any value string or integer in order to authenticate the SN...
Cambium Networks ePMP Elevation of Privilege Vulnerability
Cambium Networks ePMP is a suite of wireless network access platforms from Cambium Networks, USA. The platform provides video surveillance, Wi-Fi hotspot and sensor connectivity. An elevation of privilege vulnerability exists in Cambium Networks ePMP that stems from a failure to properly restrict...
BSA-2017-243
Security Advisory ID : BSA-2017-243 Component : SNMP Revision : 1.0: Interim The Simple Network Management Protocol SNMP is a commonly used network service. Its primary function is to provide network administrators with information about all kinds of network connected devices. SNMP can be used to...
SNMP Protocol Community String Authentication Privilege Bypass Vulnerability in Some Vendor Devices
SNMP is a network management standard based on the TCP/IP protocol family and is a standard protocol for managing network nodes such as servers, workstations, routers, switches, etc. in an IP network. SNMP protocol community strings of some vendors' devices have authentication privilege bypass...
Race condition
A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE 3.16 could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to a race condition that could occur when the affected software processes an SNMP read...
CVE-2016-5078
Paessler PRTG before 16.2.24.4045 has XSS via SNMP...
Cisco ASR 1000 Series Routers Denial of Service Vulnerability
Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software is a set of operating systems from Cisco that run in ASR 1000 Series routers. A security vulnerability exists in the 'Simple Network Management Protocol SNMP' function of Cisco IOS XE Software in Cisco ASR 1000 Serie...
CVE-2017-3820
A vulnerability in Simple Network Management Protocol SNMP functions of Cisco ASR 1000 Series Aggregation Services Routers running Cisco IOS XE Software Release 3.13.6S, 3.16.2S, or 3.17.1S could allow an authenticated, remote attacker to cause high CPU usage on an affected device, resulting in a...
ALPINE-CVE-2017-5483
The SNMP parser in tcpdump before 4.9.0 has a buffer overflow in print-snmp.c:asn1parse...
SNMP Default Group Name Vulnerability in Fibre Channel Switch SW200 Devices
This product is a Fibre Channel switch. An SNMP default group name vulnerability exists in the Fibre Channel Switch SW200 device. An attacker can exploit the vulnerability to obtain sensitive system information, posing information leakage and operational security risks...
The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software allows a perpetrator to trigger a service failure or execute arbitrary code.
The vulnerability of Cisco Adaptive Security Appliance’s microprogramming software is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor, who operates remotely and has completed the authentication process, to trigger a service failure device reboot or execute...
Unspecified Vulnerability in Oracle Sun Systems Products Suite ILOM Component (CNVD-2016-05276)
Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.ILOM Integrated Lights Out Manager is one of the system management components that comes pre-installed on x86-based servers and SPARC-based servers. A security vulnerability exists in the SNMP subcomponen...
Cisco IOS Software UBR Devices SNMP Subsystem Denial of Service Vulnerability
Cisco IOS is the interconnected Internet operating system used on most Cisco Systems routers and network switches. A vulnerability in the SNMP subsystem of the Cisco Universal Broadband Router allows an authenticated, remote attacker to cause the PXF process on the PRE module to crash...
Junos Space Network Management Platform SNMP Answer Forgery Cross-Site Scripting Vulnerability
Junos Space Network Management Platform is a network management platform solution. Junos Space Network Management Platform fails to properly process inputs, allows SNMP answer spoofing, and allows remote attackers to exploit vulnerabilities to inject malicious script or HTML code that can be used...
Vulnerabilities in the OpenSUSE operating system that allow malicious actors to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the net-snmp package of the OpenSUSE operating system can be exploited, leading to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability
The Cisco Catalyst 4500 E-Series is the next-generation, high-performance extension of the already widely deployed Cisco Catalyst 4500 Series of Ethernet modular switches. On Catalyst 4500 devices with Cisco IOS 15.12SG4 configured with single-switch VSS, SNMP has a security vulnerability in its...
Net-SNMP 4.2.3 snmpnetstat Remote Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3780/info Net-SNMP is a package of software tools related to the Simple Network Management Protocol. One of the tools included is snmpnetstat, which can be used to retrieve and display a variety of information about a...