PT-2018-15349 · Net&Sys · Net&Sys Mng2120J+1
CVE-2018-20396
·
Publicado
2018-12-23
·
Atualizado
2023-09-14
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
NET&SYS MNG2120J version 5.76.1006c
NET&SYS MNG6300 version 5.83.6305jrc2
Description
The issue allows remote attackers to discover credentials via specific SNMP requests, including "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0".
Recommendations
For NET&SYS MNG2120J version 5.76.1006c, restrict access to the SNMP requests "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0" to minimize the risk of exploitation.
For NET&SYS MNG6300 version 5.83.6305jrc2, restrict access to the SNMP requests "iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0" and "iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0" to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this issue.
Exploit
Correção
Insufficiently Protected Credentials
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Net&Sys Mng2120J
Net&Sys Mng6300