CVEvulnerability

CVE-2012-3268

3.5 LOW Published 2013-02-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2013-02-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.5 LOW — AV:N/AC:M/Au:S/C:P/I:N/A:N
Weaknesses
CWE-522

Description

Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei Firewall/Gateway, Router, Switch, and Wireless products do not properly implement access control as defined in h3c-user.mib 2.0 and hh3c-user.mib 2.0, which allows remote authenticated users to discover credentials in UserInfoEntry values via an SNMP request with the read-only community.

Affected configurations

• hp 0150a129 • hp 0150a12a • hp 0150a12b • hp 0150a12c • hp 0231a0av • hp 0231a65t • hp 0231a761 • hp 0231a832 • hp 0231a86p • hp 0231a88a • hp 0231a88l • hp 0235a08f • hp 0235a08h • hp 0235a08k • hp 0235a08m • hp 0235a09t • hp 0235a0a7 • hp 0235a0a8 • hp 0235a0as • hp 0235a0bq • hp 0235a0br • hp 0235a0bs • hp 0235a0bt • hp 0235a0bu • hp 0235a0bx • hp 0235a0c0 • hp 0235a0c2 • hp 0235a0c4 • hp 0235a0ct • hp 0235a0e3 • hp 0235a0e5 • hp 0235a0e6 • hp 0235a0e7 • hp 0235a0g0 • hp 0235a0g1 • hp 0235a0g2 • hp 0235a0g3 • hp 0235a0g4 • hp 0235a0g5 • hp 0235a0g6 • hp 0235a0g7 • hp 0235a0g8 • hp 0235a0g9 • hp 0235a0ga • hp 0235a0gc • hp 0235a0gd • hp 0235a0ge • hp 0235a0gf • hp 0235a10b • hp 0235a10c • hp 0235a10d • hp 0235a10e • hp 0235a10f • hp 0235a10g • hp 0235a10h • hp 0235a10j • hp 0235a10k • hp 0235a10l • hp 0235a14v • hp 0235a14w … and 627 more

Related

Weakness · CWE (1)

  • CWE-522 Insufficiently Protected Credentials weakness

References