Remote code execution

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in metadriversrv.js class. Attackers can send a specially crafted packet to make IPM connect to rou...

CVE-2021-23281 Remote Code execution

Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated remote code execution vulnerability. IPM software does not sanitize the date provided via coverterCheckList action in metadriversrv.js class. Attackers can send a specially crafted packet to make IPM connect to rou...

CVE-2015-8100 affecting package net-snmp 5.8-4

CVE-2015-8100 affecting package net-snmp 5.8-4. An upgraded version of the package is available that resolves this issue...

CVE-2019-20892 affecting package net-snmp 5.8-4

CVE-2019-20892 affecting package net-snmp 5.8-4. An upgraded version of the package is available that resolves this issue...

Cisco IOS XR Software SNMP Management Plane Protection ACL Bypass (cisco-sa-snmp-7MKrW7Nq)

According to its self-reported version, IOS-XR is affected by a security bypass vulnerability due to incorrect LPTS programming when using SNMP with management plane protection. An unauthenticated, remote attacker can exploit this, by connecting to an affected device with SNMP, to connect to the...

Proxmox Virtual Environment (VE, PVE) Detection Consolidation

Consolidation of Proxmox Virtual Environment VE, PVE detections. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only include"pluginfeedinfo.inc";...

BRAdmin Professional 3.75 - 'BRA_Scheduler' Unquoted Service Path

Exploit Title: BRAdmin Professional 3.75 - 'BRAScheduler' Unquoted Service Path Date: 2021-03-17 Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://global.brother/ Software Link:...

BRAdmin Professional 3.75 - (BRA_Scheduler) Unquoted Service Path Vulnerability

Exploit Title: BRAdmin Professional 3.75 - 'BRAScheduler' Unquoted Service Path Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://global.brother/ Software Link: https://support.brother.com/g/b/downloadend.aspx?c=us&lang=en&prod=hls7000dnuseuas&os=10013&dlid=dlf005042000&flang=4&type3=...

Updated ansible packages fix security vulnerability

User data leak in snmpfacts module CVE-2021-20178. Multiple collections exposed secured values CVE-2021-20191. In basic.py, nolog with fallback option CVE-2021-20228. The ansible package has been patched to fix these issues...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1614)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1660)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.0 : net-snmp (EulerOS-SA-2021-1660)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to ru...

EulerOS Virtualization 2.9.1 : net-snmp (EulerOS-SA-2021-1614)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - net-snmp before 5.8.1.pre1 has a double free in usmfreeusmStateReference in snmplib/snmpusm.c via an SNMPv3 GetBulk request...

NewStart CGSL MAIN 6.02 : net-snmp Vulnerability (NS-SA-2021-0062)

The remote NewStart CGSL host, running version MAIN 6.02, has net-snmp packages installed that are affected by a vulnerability: - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1501)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for net-snmp (EulerOS-SA-2021-1550)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization for ARM 64 3.0.6.0 : net-snmp (EulerOS-SA-2021-1550)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the...

EulerOS Virtualization 3.0.6.6 : net-snmp (EulerOS-SA-2021-1501)

According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Net-SNMP through 5.7.3 allows Escalation of Privileges because of UNIX symbolic link symlink following.CVE-2020-15861 - Net-SNM...

The vulnerability of the usm_free_usmStateReference function in the software for deploying and using the SNMP protocol Net-SNMP allows a attacker to trigger a service failure.

The vulnerability of the usmfreeusmStateReference function in the software for deploying and using the SNMP protocol Net-SNMP is due to repeated memory release. Exploiting this vulnerability can allow a malicious actor to cause service failures through specially crafted GetBulk requests...

Important: Red Hat Security Advisory: net-snmp security update

An update for net-snmp is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...