Security Lab

Раскрытие важных данных в продуктах HP

Дата публикации:23.10.2012
Всего просмотров:2141
Опасность:
Низкая
Наличие исправления: Частично
Количество уязвимостей:1
CVSSv2 рейтинг: 3.3 (AV:A/AC:L/Au:N/C:P/I:N/A:N/E:U/RL:W/RC:C)
CVE ID: CVE-2012-3268
Вектор эксплуатации: Локальная сеть
Воздействие: Раскрытие важных данных
CWE ID: Нет данных
Наличие эксплоита: Нет данных
Уязвимые продукты: 3Com H3C S3100 Series Switches
3Com H3C S3600 Series Switches
3Com H3C S5100 Series Switches
3Com Switch 4200 Family
3Com Switch 4500 Family
3Com Switch 5500 Family
3Com Switch 8800 Series
H3C MSR 20 Series Routers
H3C MSR 30 Series Routers
H3C MSR 50 Series Routers
H3C MSR 900 Series Routers
H3C S12500 Series Switches
H3C S5120-EI Series Switches
H3C S5120-SI Series Switches
H3C S5500-EI Series Switches
H3C S5500-SI Series Switches
H3C S5800 Series Switches
H3C S7500E Series Switches
H3C S9500E Core Routing Switch
H3C SecPath F1000-E
H3C SecPath U200 Series
H3C SR6600 Series Routers
H3C SR8800 Series Routers
H3C WX3000 Series Integrated Switch
H3C WX5000 Series Access Controllers
HP 10500 Switch Series
HP 12500 Switch Series
HP 1910 Switch Series
HP 200 Unified Threat Management (UTM) Appliance Series
HP 3100 EI Switch Series
HP 3100 SI Switch Series
HP 3600 EI Switch Series
HP 3600 SI Switch Series
HP 3610 Switch Series
HP 4200G Switch Series
HP 4210 Switch Series
HP 4210G Switch Series
HP 4500G Switch Series
HP 4800G Switch Series
HP 5120 EI Switch Series
HP 5120 SI Switch Series
HP 5500 EI Switch Series
HP 5500 HI Switch Series
HP 5500 SI Switch Series
HP 5800 Switch Series
HP 6600 Router Series
HP 7500 Switch Series
HP 8800 Switch Series
HP 9500 Switch Series
HP Firewall Series
HP MSR20 Series
HP MSR30 Series
HP MSR50 Series
HP MSR900 Series
HP WX5000 Access Controller Series
Уязвимые версии: 3Com H3C S3100 Series Switches
3Com H3C S3600 Series Switches
3Com H3C S5100 Series Switches
3Com Switch 4200 Family
3Com Switch 4500 Family
3Com Switch 5500 Family
3Com Switch 8800 Series
H3C MSR 20 Series Routers
H3C MSR 30 Series Routers
H3C MSR 50 Series Routers
H3C MSR 900 Series Routers
H3C S12500 Series Switches
H3C S5120-EI Series Switches
H3C S5120-SI Series Switches
H3C S5500-EI Series Switches
H3C S5500-SI Series Switches
H3C S5800 Series Switches
H3C S7500E Series Switches
H3C S9500E Core Routing Switch
H3C SecPath F1000-E
H3C SecPath U200 Series
H3C SR6600 Series Routers
H3C SR8800 Series Routers
H3C WX3000 Series Integrated Switch
H3C WX5000 Series Access Controllers
HP 10500 Switch Series
HP 12500 Switch Series
HP 1910 Switch Series
HP 200 Unified Threat Management (UTM) Appliance Series
HP 3100 EI Switch Series
HP 3100 SI Switch Series
HP 3600 EI Switch Series
HP 3600 SI Switch Series
HP 3610 Switch Series
HP 4200G Switch Series
HP 4210 Switch Series
HP 4210G Switch Series
HP 4500G Switch Series
HP 4800G Switch Series
HP 5120 EI Switch Series
HP 5120 SI Switch Series
HP 5500 EI Switch Series
HP 5500 HI Switch Series
HP 5500 SI Switch Series
HP 5800 Switch Series
HP 6600 Router Series
HP 7500 Switch Series
HP 8800 Switch Series
HP 9500 Switch Series
HP Firewall Series
HP MSR20 Series
HP MSR30 Series
HP MSR50 Series
HP MSR900 Series
HP WX5000 Access Controller Series

Описание:
Уязвимость позволяет удаленному пользователю получить доступ к важным данным на системе.

Уязвимость существует из-за того, что определенная важная информация может быть раскрыта с помощью строки SNMP. Удаленный пользователь может раскрыть учетные данные администратора.

URL производителя: http://h17007.www1.hp.com/us/en/products/

Решение: Установите обновление с сайта производителя, если оно есть для определенного продукта.

Ссылки: https://h20566.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03515685
http://grutztopia.jingojango.net/2012/10/hph3c-and-huawei-snmp-weak-access-to.html