snmpwn

SNMPwn is an SNMPv3 user enumerator and attack tool. It is a legitimate security tool designed to be used by security professionals and penetration testers against hosts you have permission to test. It takes advantage of the fact that SNMPv3 systems will respond with "Unknown user name" when an...

CVE-2026-11116-SNMPv3-Authentication-Bypass-via-Default-EngineID

CVE-2026-11116 – SNMPv3 Authentication Bypass via Default EngineID Program Code Python with pysnmp snmpagentsim.py - SNMPv3 agent using well-known EngineID from pysnmp.hlapi import def snmpgetengineid=SnmpEngineIDhexValue='8000000001020304': iterator = getCmd SnmpEngineengineID=engineid,...

Cisco IOS Software SNMPv3 Configuration Restriction (cisco-sa-snmpv3-qKEYvzsy)

According to its self-reported version and configuration, Cisco IOS Software is affected by a vulnerability. - A vulnerability in the implementation of the Simple Network Management Protocol Version 3 SNMPv3 feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,...

Cisco IOS XE Software SNMPv3 Configuration Restriction (cisco-sa-snmpv3-qKEYvzsy)

According to its self-reported version and configuration, Cisco IOS-XE Software is affected by a vulnerability. - A vulnerability in the implementation of the Simple Network Management Protocol Version 3 SNMPv3 feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated,...

lwip-snmpv3-stack-overflow-cve-2026-8836-critical-embedded-rce

CVE-2026-8836 — lwIP SNMPv3 Stack Overflow PoC Proof of concept exploit for CVE-2026-8836, a critical stack-based buffer overflow in lwIP's SNMPv3 USM handler. Vulnerability CVE : CVE-2026-8836 CVSS : 9.8 Critical Component : snmpparseinboundframe in src/apps/snmp/snmpmsg.c Root Cause :...

GeoVision SNMPv3 authKey injection root RCE

LAPI Digest admin: szAuthKey injected into net-snmp-config system sink classic '; cmd ; ' on TBL4700. """GeoVision GV-TBL4700 — SNMPv3 User Config → net-snmp-config Command Injection → Root RCE""" from future import annotations import json from kittysploit import from lib.protocols.http.httpclien...

CVE-2026-65198

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

EUVD-2026-98750

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

CVE-2026-65198

Huawei's openUBMC software ships with a hard-coded default SNMPv3 USM key used for both authentication and privacy. Because these keys are shipped as constants and are not rotated by the Administrator password reset, an attacker who recovers the key from the open-source build can authenticate to ...

CVE-2026-65198 Huawei Default SNMPv3 USM key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

CVE-2026-65198 Huawei Default SNMPv3 USM key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

PT-2026-111596

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

CVE-2026-65198: Use of Hard-coded Cryptographic Key

Huawei's openUBMC ships a default SNMPv3 USM key that uses one value for both authentication and privacy. An attacker who holds the key recoverable from the open-source build can authenticate SNMPv3 to, and decrypt SNMPv3 traffic from, any unit that still carries the shipped key. The build...

snmpwn

SNMPwn es una herramienta de enumeración y ataque de usuarios SNMPv3. Es una herramienta de seguridad legítima diseñada para ser utilizada por profesionales de seguridad y testers de penetración contra hosts que tengas permiso de probar. Aprovecha el hecho de que los sistemas SNMPv3 responderán c...

CVE-2026-87684

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

CVE-2026-87684

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

CVE-2026-87684

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

CVE-2026-87684

A stack-based buffer overflow exists in the SNMP daemon request handling of Brocade Fabric OS (FOS) versions before 10.0.1 . The vulnerability is triggered when processing an incoming SNMPv3 packet ; specifically, an internal statistics gathering handler copies user-supplied context name data int...

PT-2026-107776

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...

CVE-2026-87684: Stack-based Buffer Overflow

A stack-based buffer overflow vulnerability exists in the SNMP daemon request handling of Brocade Fabric versions before 10.0.1. When processing an incoming SNMPv3 packet, an internal statistics gathering handler copies user-supplied context name data into a fixed-size buffer without properly...