3 matches found
CVE-2012-3268
CVE-2012-3268 describes an SNMP information-disclosure vulnerability in HP/H3C/Huawei networking gear where protected h3c-user.mib/hh3c-user.mib objects can be queried via a read-only SNMP community, allowing remote authenticated users to enumerate usernames, passwords or password hashes in UserI...
[security bulletin] HPSBHF02819 SSRT100920 rev.2 - HP, 3COM, and H3C Routers & Switches, Remote Disclosure of Information
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c03515685 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c03515685 Version: 2 HPSBHF02819...
Security Advisory - SNMP vulnerability on Huawei multiple products
In some of Huawei products as affected products list below, there are MIBs which support the query of the local user account and password. However, the security authentication protection for SNMP V1 and V2 is not enough, which leads to the risk that the user account and password can be disclosed...