CVE-2012-3268

Name of the Vulnerable Software and Affected Versions HP Access Controller versions (affected versions not specified) HP Fabric Module versions (affected versions not specified) HP Firewall versions (affected versions not specified) HP Router versions (affected versions not specified) HP Switch versions (affected versions not specified) HP UTM Appliance versions (affected versions not specified) HP 3Com Access Controller versions (affected versions not specified) HP 3Com Router versions (affected versions not specified) HP 3Com Switch versions (affected versions not specified) HP H3C Access Controller versions (affected versions not specified) HP H3C Firewall versions (affected versions not specified) HP H3C Router versions (affected versions not specified) HP H3C Switch versions (affected versions not specified) HP H3C Switch and Route Processing Unit versions (affected versions not specified) Huawei Firewall/Gateway versions (affected versions not specified) Huawei Router versions (affected versions not specified) Huawei Switch versions (affected versions not specified) Huawei Wireless versions (affected versions not specified)

Description The issue is related to improper implementation of access control, allowing remote authenticated users to discover credentials via an SNMP request. This is possible due to the read-only community in h3c-user.mib 2.0 and hh3c-user.mib 2.0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.