Lucene search
K

308 matches found

Tenable Nessus
Tenable Nessus
added 2025/03/05 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2022-24805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a buffer overflow in the handling of the INDEX of...

8.8CVSS7.4AI score0.00289EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/02/07 5:21 p.m.7 views

CVE-2025-20176

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

7.7CVSS6.9AI score0.00947EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/02/07 12:0 a.m.10 views

Cisco IOS XE Software SNMP DoS (cisco-sa-snmp-dos-sdxnSUcW)

According to its self-reported version, Cisco IOS-XE Software is affected by multiple vulnerabilities. - A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This...

7.7CVSS5.5AI score0.00947EPSS
Exploits0References18
CVE
CVE
added 2025/02/05 4:40 p.m.92 views

CVE-2025-20169

Cisco IOS/IOS XE/IOS XR SNMP DoS: Improper error handling when parsing SNMP requests can cause a device reload or SNMP reset, enabling authenticated remote DoS (SNMP v1/v2c/v3; credentials may be required for v3). Affected: SNMP subsystem; impact: high availability DoS. CVE-2025-20169 (and relate...

7.7CVSS7AI score0.00533EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2025/02/05 4:39 p.m.45 views

CVE-2025-20175

CVE-2025-20175 describes a DoS vulnerability in the SNMP subsystem of Cisco IOS Software, IOS XE, and IOS XR caused by improper error handling when parsing SNMP requests. An authenticated, remote attacker can exploit this by sending a crafted SNMP request, potentially forcing the device to reload...

7.7CVSS7.2AI score0.00533EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/05 4:38 p.m.4 views

CVE-2025-20171

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

7.7CVSS7.5AI score0.00301EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/02/05 4:38 p.m.10 views

CVE-2025-20176

A vulnerability in the SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper error handling when parsing SNMP requests. An attacker could exploit this...

7.7CVSS0.00947EPSS
Exploits0References1
CVE
CVE
added 2025/02/05 4:35 p.m.53 views

CVE-2025-20173

The CVE-2025-20173 issue concerns Cisco IOS/IOS XE/IOS XR SNMP handling. The SNMP subsystem fails to handle certain requests due to improper error handling, enabling an authenticated remote attacker to trigger a denial of service. Affected are SNMP versions 1, 2c, and 3; exploitation requires a v...

7.7CVSS7.5AI score0.00947EPSS
Exploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/02/05 6:38 a.m.3 views

CVE-2024-5460

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

8.1CVSS6.8AI score0.00491EPSS
Exploits1References1
OSV
OSV
added 2024/09/30 7:15 a.m.1 views

CVE-2024-8450

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges...

9.8CVSS5.8AI score
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/09/30 6:50 a.m.23 views

CVE-2024-8450 PLANET Technology switch devices - Hard-coded SNMPv1 read-write community string

Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges...

8.6CVSS7AI score0.01449EPSS
Exploits0References2
CVE
CVE
added 2024/09/30 6:50 a.m.51 views

CVE-2024-8450

PLANET Technology PLANET switches have a hard-coded SNMPv1 community string that grants read-write access, enabling unauthorized remote exploitation. The CVE-2024-8450 entry confirms this vulnerability in certain PLANET switch models, with impact on confidentiality, integrity, and availability (h...

9.8CVSS8.5AI score0.01449EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2024/09/30 12:0 a.m.1 views

PT-2024-39020 · Planet Technology · Planet Technology Switch

Name of the Vulnerable Software and Affected Versions: PLANET Technology switch models affected versions not specified Description: The issue concerns a hard-coded community string in the SNMPv1 service of certain switch models from PLANET Technology. This allows unauthorized remote attackers to...

9.8CVSS9.4AI score0.01449EPSS
Exploits0References12
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.506 views

SNMP Community Login Scanner

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'metasploit/framework/communitystringcollection' require 'metasploit/framework/loginscanner/snmp' class MetasploitModule 'SNMP Community Login Scanner',...

6.9AI score0.89585EPSS
Exploits3
OSV
OSV
added 2024/06/26 12:15 a.m.1 views

CVE-2024-5460

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

8.1CVSS7.3AI score
Exploits0References1
CNNVD
CNNVD
added 2024/06/26 12:0 a.m.1 views

Brocade Fabric OS Security Vulnerabilities

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS versions prior to v9.0.0, which stems from a hard-coded default setting community string in the configuration file of th...

8.1CVSS6.7AI score0.00491EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2024/06/25 11:58 p.m.26 views

CVE-2024-5460 Brocade Fabric OS versions prior to v9.0 have default community strings

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

8.1CVSS6.8AI score0.00491EPSS
Exploits1References1
CVE
CVE
added 2024/06/25 11:58 p.m.68 views

CVE-2024-5460

CVE-2024-5460 affects Brocade Fabric OS versions before 9.0.0, where a hard-coded, default SNMP community string in the SNMP daemon config enables an authenticated, remote attacker to read data from the device. Exploitation via SNMP v1 with the static community string is implied; the vulnerabilit...

8.1CVSS8AI score0.00491EPSS
Exploits1References1Affected Software1
Broadcom
Broadcom
added 2024/05/29 12:0 a.m.6 views

Fabric OS versions prior to v9.0 have default community strings (CVE-2024-5460)

A vulnerability in the default configuration of the Simple Network Management Protocol SNMP feature of Brocade Fabric OS versions before v9.0.0 could allow an authenticated, remote attacker to read data from an affected device via SNMP. The vulnerability is due to hard-coded, default community...

8.1CVSS6.8AI score0.00491EPSS
Exploits1Affected Software1
NVD
NVD
added 2024/04/16 8:15 p.m.18 views

CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...

6.5CVSS6.3AI score0.00135EPSS
Exploits0References7
Rows per page
Query Builder