DEBIAN-CVE-2020-15862

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

CVE-2020-14935

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. When a bulk get...

CVE-2020-14937

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access ...

The net-snmp package in OpenBSD through 5.8 uses 0644 permissions for snmpd.conf which allows local users to obtain sensitive community information by reading this file.

...

CVE-2020-8232

An information disclosure vulnerability exists in EdgeMax EdgeSwitch firmware v1.9.0 that allowed read only users could obtain unauthorized information through SNMP community pages...

Vulnerabilities fixed in SNMP

Debian has fixed vulnerabilities in SNMP. The vulnerabilities allow a locally authenticated malicious person to obtain elevated privileges. -= Debian =- Debian has made updates to net-snmp available for Debian 10.0 Buster to address the vulnerabilities. You can install the custom packages install...

Unspecified vulnerability in the Grandstream HT800 series

The Grandstream HT800 series is an HT800 series analog phone adapter from Grandstream. An input validation error vulnerability exists in the Grandstream HT800 series using firmware version 1.0.17.5 and earlier. The vulnerability stems from a failure of the system to properly validate incoming dat...

Net-SNMP Resource Management Error Vulnerability

Net-SNMP is an open source Simple Network Management Protocol SNMP software. The software is used to monitor network devices, computer devices, UPS devices and so on. A resource management error vulnerability exists in the usmfreeusmStateReference of the snmplib/snmpusm.c file in versions of...

UBUNTU-CVE-2019-20892

net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request. NOTE: this affects net-snmp packages shipped to end users by multiple Linux distributions, but might not affect an upstream release...

Cisco IOS and IOS XE Code Issue Vulnerabilities

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. A code issue vulnerability exists in the Simple Network Management Protocol SNMP subsystem of the IOS Software and IOS XE Software in the Cisco Catalyst 4500 Series, which arises from a program that do...

CVE-2020-3232

A vulnerability in the Simple Network Management Protocol SNMP implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is return...

Race condition

A vulnerability in the Simple Network Management Protocol SNMP implementation in Cisco ASR 920 Series Aggregation Services Router model ASR920-12SZ-IM could allow an authenticated, remote attacker to cause the device to reload. The vulnerability is due to incorrect handling of data that is return...

Cisco IOS and IOS XE Software Simple Network Management Protocol Denial of Service Vulnerability

A vulnerability in the Simple Network Management Protocol SNMP subsystem of Cisco IOS Software and Cisco IOS XE Software on Catalyst 4500 Series Switches could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to insufficient input...

CVE-2020-5364

Dell EMC Isilon OneFS versions 8.2.2 and earlier contain an SNMPv2 vulnerability. The SNMPv2 services is enabled, by default, with a pre-configured community string. This community string allows read-only access to many aspects of the Isilon cluster, some of which are considered sensitive and can...

Wind River Systems VxWorks IGMP Component Code Issue Vulnerability

Wind River Systems VxWorks is an embedded real-time operating system RTOS from Wind River Systems, Inc.IGMP is one of the Internet Group Management Protocol components. A code issue vulnerability exists in the IGMP component of Wind River Systems VxWorks. The vulnerability arises from an improper...

CVE-2020-10664

The IGMP component in VxWorks 6.8.3 IPNET CVE patches created in 2019 has a NULL Pointer Dereference...

CVE-2019-19108

An authentication weakness in the SNMP service in B&R Automation Runtime versions 2.96, 3.00, 3.01, 3.06 to 3.10, 4.00 to 4.63, 4.72 and above allows unauthenticated users to modify the configuration of B&R products via SNMP...

Synergy Systems & Solutions HUSKY RTU 6049-E70 Access Control Error Vulnerability (CNVD-2020-25373)

Synergy Systems & Solutions HUSKY RTU 6049-E70 is a Remote Terminal Unit RTU from Synergy Systems & Solutions, India. The Synergy Systems & Solutions HUSKY RTU 6049-E70 is vulnerable to an access control error that can be exploited by an attacker to view the network configuration via SNMP...

Moderate: Red Hat Bug Fix Advisory: net-snmp bug fix and enhancement update

An update for net-snmp is now available for Red Hat Enterprise Linux 8. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools fo...

The vulnerability of the IGMPv3 protocol in real-time operating systems like Wind River VxWorks allows a attacker to trigger a service failure.

The vulnerability of IGMPv3 protocols in real-time operating systems like Wind River VxWorks is related to an array indexing error. Exploiting this vulnerability could allow a malicious actor to cause service failure by renaming “NULL” as IGMP...