CVE-2018-0329

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Cisco Wide Area Application Services WAAS Software could allow an unauthenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to a hard-coded,...

CVE-2018-0329

Cisco WAAS Software SNMP is vulnerable due to a hard-coded, read-only community string in the SNMP daemon config. This static credential, defined in an internal file and not visible in running/startup configs, allows unauthenticated remote readers to access data via SNMP v2c. Root cause: default/...

CVE-2018-0329

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Cisco Wide Area Application Services WAAS Software could allow an unauthenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to a hard-coded,...

CVE-2018-0329: Use of Hard-coded Credentials

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Cisco Wide Area Application Services WAAS Software could allow an unauthenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to a hard-coded,...

Cisco Wide Area Application Services Software Static SNMP Credentials Vulnerability

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Cisco Wide Area Application Services WAAS Software could allow an unauthenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to a hard-coded,...

Cambium ePMP SNMP Enumeration

Cambium devices ePMP, PMP, Force, & others can be administered using SNMP. The device configuration contains IP addresses, keys, and passwords, amongst other information. This module uses SNMP to extract Cambium ePMP device configuration. On certain software versions, specific device configuratio...

SD-WAN SNMP OID

This article will describe how to retrieve OID's from SD-WAN MIB file. As the other 3rd party SNMP tools needs OID to receive alerts from the SD-WAN for monitoring...

APC MGE SNMP/Web Card Transverse 66074 Administrator Account Disclosure

The vulnerability of the embedded web-server-based microprogramming software module for the APC MGE SNMP/Web Card Transverse 66074 relates to the transmission of credentials in an unencrypted form. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain...

CVE-2018-8938

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 18.0. Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server...

Code injection

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 18.0. Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server...

CVE-2018-8938

Ipswitch WhatsUp Gold before 18.0 is affected by a Code Injection vulnerability in DlgSelectMibFile.asp. A specially crafted SNMP MIB file can cause arbitrary command/code execution on the WhatsUp Gold server. Affected: WhatsUp Gold versions prior to 18.0. Root cause: errors in code generation/ha...

CVE-2018-8938

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 18.0. Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server...

Oracle WebLogic SNMP Detection (UDP)

Oracle WebLogic, a Java EE application server, was detected on the remote host. TRUSTED...

CVE-2018-8938: Improper Control of Generation of Code

A Code Injection issue was discovered in DlgSelectMibFile.asp in Ipswitch WhatsUp Gold before 2018 18.0. Malicious actors can inject a specially crafted SNMP MIB file that could allow them to execute arbitrary commands and code on the WhatsUp Gold server...

Oracle WebLogic SNMP Detection (TCP)

Oracle WebLogic, a Java EE application server, was detected on the remote host. TRUSTED...

Microsoft Windows SNMP Denial of Service (CVE-2018-0967)

A Denial of service vulnerability exists in Microsoft Windows SNMP Service. The service fails to properly handle malformed SNMP messages. An attacker could exploit this vulnerability via a specially crafted SNMP message...

Critical Photon OS Security Update - PHSA-2018-0126

Updates of 'httpd', 'strongswan', 'paramiko', 'python3', 'patch', 'mercurial', 'xerces-c', 'pycrypto', 'sqlite- autoconf', 'binutils', 'mysql', 'net-snmp' packages of Photon OS have been released...

Critical Photon OS Security Update - PHSA-2018-0037

Updates of 'linux-aws', 'mysql', 'paramiko', 'linux-secure', 'patch', 'python3', 'net-snmp', 'linux-esx', 'binutils', 'linux', 'mercurial', 'pycrypto', 'python2', 'util-linux', 'xerces-c', 'zsh', 'sqlite' packages of Photon OS have been released...

Juniper Junos SNMP MIB-II Subagent Daemon (mib2d) Unspecified Remote DoS (JSA10847)

According to its self-reported version number and configuration, the remote Juniper Junos device is affected by an unspecified flaw in the SNMP MIB-II subagent daemon, mib2d, that allows a remote attacker to cause the daemon to crash, resulting in a denial of service for the SNMP subsystem. No...

Using SNMP with App Layering and Unidesk appliances

A number of customers want to have some kind of external monitoring system for our appliances. SNMP is a fine choice, except that we do not enable it by default on our appliances, and we do not have a custom MIB. However, the SNMP daemon is installed, so if the customer knows what they're doing,...