snmpvlan

snmpvlan CVE ID: CVE-2014-3341. Cisco Bug ID: CSCup85616. NexusTaco は、Cisco Nexus スイッチ（5000 および 6000 ファミリー）を評価するために、内部テストと外部テストの両方で使用できる SNMP スキャナです。 SNMP スキャナやブルートフォーサーは数多く存在しますが、これは網羅性を目的として作られました。以下の機能を備えています: Nexus スイッチを特異的に検出します（偽のコミュニティ文字列に応答する傾向があるため） VLAN ID...

snmp-shell

SNMP Shell Net-SNMP の extend 機能を使ったシェルシミュレーション こちらがプレビューです： 説明 対象のマシンに Net-SNMP インスタンスと "extend" 機能があり、書き込みアクセス を提供する SNMP コミュニティストリング を取得している場合、このツールを使用して SNMP RCE でコマンドを送信するプロセスを自動化できます。 このツールは自動的に、あなたのいるパス上で本物のシェルをシミュレート します。 完全にインタラクティブなシェルを必要とするコマンド（MySQL、Vim、Nano など）以外は、想像できるすべてのコマンドも使用できます...

Cisco-SNMP-Slap

概要 cisco-snmp-slap は、IPアドレス・スプーフィングを利用して、Cisco IOSデバイス上のSNMPサービスを保護するACLをバイパスします。 通常、IPスプーフィングはDoS以外の実際の攻撃では使用が限られます。TCPサービスは初期ハンドシェイクを完了できません。UDPパケットはスプーフィングしやすいですが、戻りパケットはしばしば誤ったアドレスに送信されるため、返ってくる情報を収集するのは困難です。 しかし、攻撃者がSNMP rwコミュニティストリングと有効な送信元アドレスを推測できれば、SNMP MIBを設定できます。その最もわかりやすい用途の1つは、Cisco...

CVE-2026-93338

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

CVE-2026-93338 Grandstream GWN7660ELR < 1.0.27.6 Information Disclosure via SNMP Default Community String

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

CVE-2026-93338 Grandstream GWN7660ELR < 1.0.27.6 Information Disclosure via SNMP Default Community String

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

CVE-2026-93338

Grandstream GWN7660ELR firmware prior to version 1.0.27.6 contains an information disclosure vulnerability in its SNMP v2c service, which ships with the default community string public . An unauthenticated remote attacker can query standard MIBs to retrieve the operating system and kernel version...

CVE-2026-93338: Initialization of a Resource with an Insecure Default

Grandstream GWN7660ELR before firmware version 1.0.27.6 contains an information disclosure vulnerability that allows unauthenticated remote attackers to obtain sensitive system information by querying the SNMP v2c service configured with the default community string 'public'. Attackers can query...

CVE-2026-20124

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS XE Software could allow an authenticated, remote attacker to cause an affected device to reload, resulting in a denial of service DoS condition. This vulnerability is due to improper error handling when parsing...

CVE-2024-32387

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the community string component...

CVE-2024-32387

Kerlink Wirnet iStation 868 KerOS v.4.3.3_20200803132042 is affected by CVE-2024-32387. The issue allows a remote attacker to obtain sensitive information through the community string component. No additional technical details, root cause, affected subcomponents, or remediation steps are provided...

CVE-2024-32387

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the community string component...

PT-2026-60585

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.3 20200803132042 allows a remote attacker to obtain sensitive information via the community string component...

CVE-2024-32387

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the community string component...

CVE-2024-32387: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Kerlink Kerlink Wirnet iStation 868 KerOS v.4.3.320200803132042 allows a remote attacker to obtain sensitive information via the community string component...

CVE-2026-20185

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco 350 Series Managed Switches SG350 and Cisco 350X Series Stackable Managed Switches SG350X firmware could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This...

CVE-2026-28775

An unauthenticated Remote Code Execution RCE vulnerability exists in the SNMP service of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the private SNMP community string with read/write access by default. Because the SNMP age...

CVE-2026-28775

An unauthenticated Remote Code Execution RCE vulnerability exists in the SNMP service of International Datacasting Corporation IDC SFX Series SuperFlex SatelliteReceiver. The deployment insecurely provisions the private SNMP community string with read/write access by default. Because the SNMP age...

CVE-2026-20048

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an authenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to improper processing when...

CVE-2017-6738

The Simple Network Management Protocol SNMP subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these...