CVE-2020-3235: Incorrect Access of Indexable Resource

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient input...

PT-2020-2689

Name of the Vulnerable Software and Affected Versions Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches affected versions not specified Description A vulnerability in the Simple Network Management Protocol SNMP subsystem could allow an authenticated, remote attacker to...

CVE-2020-3232: Undefined Security Weakness

A vulnerability in the Simple Network Management Protocol SNMP implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is return...

CentOS: Security Advisory for bmc-snmp-proxy (CESA-2020:0984)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-13023

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to chan...

Hardcoded credentials

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to chan...

CVE-2019-13023

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to chan...

PT-2020-9368

Name of the Vulnerable Software and Affected Versions: Bond JetSelect affected versions not specified Description: An issue was discovered in Bond JetSelect where the web interface uses HTML 'password field' obfuscation to hide RADIUS secrets, WPA passwords, and SNMP strings from non-administrati...

CVE-2019-13023: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in all versions of Bond JetSelect. Within the JetSelect Application, the web interface hides RADIUS secrets, WPA passwords, and SNMP strings from 'non administrative' users using HTML 'password field' obfuscation. By using Developer tools or similar, it is possible to chan...

Huawei Data Communication: Disabling the SNMPV1/V2 Service

The security level of SNMPv1v2 is low. Disable SNMPv1v2. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...

Huawei Data Communication: SNMP agent ACL

SNMP ACLs are configured to defend against attacks. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Huawei Data Communication: SNMP agent complexity-check

If SNMPv1 and SNMPv2 are used, the community complexity check function must be enabled. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Huawei Data Communication: Read current snmp configuration

Get the current SNMP configuration of the VRP device. Note: This script only stores information for other Policy Controls. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Scientific Linux Security Update : net-snmp on SL7.x x86_64 (20200407)

net-snmp: NULL pointer exception in snmpoidcompare in snmplib/snmpapi.c resulting in a denial of service C Tenable Network Security, Inc. The descriptive text is C Scientific Linux. include'compat.inc'; if description scriptid135825; scriptversion"1.3";...

CVE-2019-19108

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

Authentication flaw

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

CVE-2019-19108 B&R Automation Runtime SNMP Authentication and Authorization Weakness

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

CVE-2019-19108

CVE-2019-19108 describes an authentication weakness in the SNMP service affecting B&R Automation Runtime (and Automation Studio) versions 2.96, 3.00, 3.01, 3.06–3.10, 4.00–4.63, 4.72 and above. The vulnerability allows unauthenticated users to modify device configuration via SNMP, with CVSS v3 ba...

CVE-2019-19108: Use of Hard-coded Credentials

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

PT-2020-10050

Name of the Vulnerable Software and Affected Versions B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 through 3.10, 4.00 through 4.63, 4.72 and above Description An authentication weakness in the SNMP service allows unauthenticated users to modify the configuration of B&R products via SNMP...