CVE-2012-3268 Information disclosure in n/a
Remote authenticated users can discover credentials via SNMP requests due to improper access control in MIB implementations on various network devices.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2012-3268?
CVE-2012-3268 is a low-severity vulnerability in n/a, published on 1 Feb 2013. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei Firewall/Gateway, Router, Switch, and Wireless products do not properly implement access control as defined in h3c-user.mib 2.0 and hh3c-user.mib 2.0, which allows remote authenticated users to discover credentials in UserInfoEntry values via an SNMP request with the read-only community.
Weakness: CWE-522
Which versions are affected by CVE-2012-3268?
It affects 675 products.
Products include Hp 0150a129, Hp 0150a12a, Hp 0150a12b, Hp 0150a12c, Hp 0231a0av, Hp 0231a65t and 669 more.
How do I fix CVE-2012-3268?
No fix has been published for CVE-2012-3268 yet. Limit exposure of the affected software until one is available.
Is CVE-2012-3268 being exploited?
There is no known exploitation of CVE-2012-3268 in the wild and no public exploit code.
Sources
Also known as GHSA-hvr2-8j68-89rx.