CVE-2008-7095

EPSS 0.3%
Veröffentlicht 27.08.2009 18:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The SNMP daemon in ArubaOS 3.3.2.6 in Aruba Mobility Controller does not restrict SNMP access, which allows remote attackers to (1) read all SNMP community strings via SNMP-COMMUNITY-MIB::snmpCommunityName (1.3.6.1.6.3.18.1.1.1.2) or SNMP-VIEW-BASED-ACM-MIB::vacmGroupName (1.3.6.1.6.3.16.1.2.1.3) with knowledge of one community string, and (2) read SNMPv3 user names via SNMP-USER-BASED-SM-MIB or SNMP-VIEW-BASED-ACM-MIB.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Arubanetworks ≫ Aruba Mobility Controller

Arubanetworks ≫ Arubaos Version3.3.2.6

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.506

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.8	10	6.9	AV:N/AC:L/Au:N/C:C/I:N/A:N

http://osvdb.org/51916

http://www.securityfocus.com/archive/1/498033/100/0/threaded

http://www.securityfocus.com/bid/32102

https://nvd.nist.gov/vuln/detail/CVE-2008-7095

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-7095

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-7095

EUVD