Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2016-15058
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Hirschmann HiLCOS Classic Platform Password Exposure via SNMP
Source: NVD (National Vulnerability Database)
Vulnerability Description
Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is enabled. Attackers with local network access can sniff SNMP traffic or extract configuration data to recover plaintext credentials and gain unauthorized administrative access to the switches.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
以可恢复格式存储口令
Source: NVD (National Vulnerability Database)
Vulnerability Title
Belden多款产品 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Belden Hirschmann HiLCOS OpenBAT等都是美国Belden公司的产品。Belden Hirschmann HiLCOS OpenBAT是一款工业级无线局域网设备。Belden Hirschmann HiLCOS BAT450是一款工业级无线局域网接入点设备。Belden Hirschmann HiLCOS BAT867是一款工业级无线局域网接入点设备。 Belden多款产品存在安全漏洞,该漏洞源于用户密码与SNMPv1/v2团体字符串同步并以明文传输,可能导致本地网络攻击者嗅探
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
BeldenHirschmann HiLCOS Classic Platform >= 09.0.06 -
II. Public POCs for CVE-2016-15058
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2016-15058
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2016-15058

No comments yet


Leave a comment