PT-2015-7171

Name of the Vulnerable Software and Affected Versions Cisco NX-OS version 6.02U60.46 Description The issue allows remote authenticated users to cause a denial of service, resulting in a temporary SNMP outage. This can be achieved by sending an SNMP request for a non-existent OID. Recommendations...

Cisco Nexus 3000 Series Switches SNMP Non-Existent OID Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP interface of the Nexus 3000 N3K Series Switch could allow an authenticated, remote attacker to cause a partial denial of service DoS condition to the SNMP service running on the device. The vulnerability is due to improper handling of...

Gentoo Security Advisory GLSA 201409-02

Gentoo Linux Local Security Checks GLSA 201409-02 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Gentoo Security Advisory GLSA 201507-17

Gentoo Linux Local Security Checks GLSA 201507-17 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

SOL17315 - SNMP vulnerability CVE-2014-3565

Vulnerability Recommended Actions If the previous table lists a version in the Versions known to be not vulnerable column, you can eliminate this vulnerability by upgrading to the listed version. If the listed version is older than the version you are currently running, or if the table does not...

Cisco Prime Collaboration Assurance Multiple Vulnerabilities (cisco-sa-20100217-csa)

According to its self-reported version number, the remote Cisco Prime Collaboration Assurance device is prior to 10.5.1.53684 or is in the 10.6 release branch. It is, therefore, affected by the following vulnerabilities : - A security bypass vulnerability exists in the web framework due to improp...

GLSA-201507-17 : SNMP: Denial of Service

The remote host is affected by the vulnerability described in GLSA-201507-17 SNMP: Denial of Service A specially crafted trap message triggers a conversion to an erroneous variable type when the -OQ option is used. Impact : A remote attacker could possibly cause a Denial of Service condition...

SNMP v3 System Generated Passwords are Not Accepted by CloudBridge

When SNMP-v3 trap receiver is configured, authentication and privacy passwords assigned to SNMP-v3 management applications are system-generated and contain special characters like: .,,@,$,%, , , “,” and so on. However these system-generated passwords are not accepted on the CloudBridge password...

Cisco Wireless LAN Controller (WLC) Detection (SNMP)

SNMP based detection of Cisco Wireless LAN Controller WLC. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Catalyst 4500 Detection (SNMP)

This VT has been deprecated and replaced by the VT SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Cisco Catalyst 4500 SNMP Polling Denial of Service Vulnerability (Cisco-SA-20150402-CVE-2015-0687)

A vulnerability in the Simple Network Management Protocol SNMP code of Cisco Catalyst 4500 devices running Cisco IOS Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpt...

Design/Logic Flaw

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656...

CVE-2015-4305

The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-database read restrictions, and discover credentials or SNMP communities for arbitrary tenant domains, via a crafted URL, aka Bug ID CSCus62656...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...

Thomson CableHome Gateway DWG849 Information Disclosure

Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gateways Software Link: n/a Version:...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure

Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage: http://www.technicolor.com/en/solutions-services/connected-home/modems-gateways Software Link: n/a Version:...

Thomson CableHome Gateway (DWG849) Cable Modem Gateway - Information Exposure

Thomson CableHome Gateway DWG849 Cable Modem Gateway - Information Exposure Exploit Title: Information Exposure via SNMP on Thomson CableHome Gateway MODEL: DWG849 Cable Modem Gateway Google Dork: n/a Date: 09/18/2015 Exploit Author: Matt Dunlap Vendor Homepage:...

Cisco Prime Collaboration Assurance Information Disclosure Vulnerability

A vulnerability in the web framework of Cisco Prime Collaboration Assurance could allow an authenticated, remote attacker to access information about any device imported into the system database. The vulnerability is due to improper implementation of authorization and access controls. An attacker...

Multiple Vulnerabilities in Cisco Prime Collaboration Assurance

Cisco Prime Collaboration Assurance Software contains the following vulnerabilities: Cisco Prime Collaboration Assurance Web Framework Access Controls Bypass Vulnerability Cisco Prime Collaboration Assurance Information Disclosure Vulnerability Cisco Prime Collaboration Assurance Session ID...

SUSE SLED12 / SLES12 Security Update : net-snmp (SUSE-SU-2015:1556-1)

The following issues have been fixed within this update : - fix btrfs output inside HOST-RESOURCES-MIB::hrStorageDescr. bsc909479 - fix an incompletely initialized vulnerability within the snmppduparse function of snmpapi.c. bsc940188, CVE-2015-5621 - add build requirement 'procps' to fix a...