CVE - CVE-2012-3268

CVE-ID
CVE-2012-3268	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei Firewall/Gateway, Router, Switch, and Wireless products do not properly implement access control as defined in h3c-user.mib 2.0 and hh3c-user.mib 2.0, which allows remote authenticated users to discover credentials in UserInfoEntry values via an SNMP request with the read-only community.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:56183 URL:http://www.securityfocus.com/bid/56183 BUGTRAQ:20121023 HP/H3C and Huawei SNMP Weak Access to Critical Data URL:http://archives.neohapsis.com/archives/bugtraq/2012-10/0123.html CERT-VN:VU#225404 URL:http://www.kb.cert.org/vuls/id/225404 CONFIRM:http://support.huawei.com/enterprise/NewsReadAction.action?newType=0301&contentId=NEWS1000001165&idAbsPath=0301_10001&nameAbsPath=Services%2520News CONFIRM:http://support.huawei.com/support/pages/news/NewsInfoAction.do?doc_id=IN0000054930&colID=ROOTENWEB\|CO0000000170&actionFlag=view CONFIRM:http://www.kb.cert.org/vuls/id/MORO-8ZDJDP HP:HPSBHF02819 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03515685 HP:SSRT100920 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03515685 HP:SSRT100962 URL:http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03515685 MISC:http://grutztopia.jingojango.net/2012/10/hph3c-and-huawei-snmp-weak-access-to.html SECTRACK:1027694 URL:http://www.securitytracker.com/id?1027694
Assigning CNA
HP Inc.
Date Record Created
20120606	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20120606)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)