There is a vulnerability in the way the remote device handles SNMP messages. An attacker may use this flaw to crash the remote device continuously.

This vulnerability is documented as Cisco bug ID CSCdw67458.

It was possible to disable the remote SNMP daemon by sending a malformed packet advertising bogus length fields.

An attacker may use this flaw to prevent you from using SNMP to administer your network (or use other flaws to execute arbitrary code with the privileges of the SNMP daemon).

Multiple Cisco products contain vulnerabilities in the processing of Simple Network Management Protocol (SNMP) messages. The vulnerabilities can be repeatedly exploited to produce a denial of service. In most cases, workarounds are available that may mitigate the impact. These vulnerabilities are identified by various groups as VU#617947, VU#107186, OUSPG #0100, CVE-2002-0012, and CVE-2002-0013.

複数の Cisco の製品に、Session Initiation Protocol（SNMP）メッセージの処理における脆弱性が含まれています。これらの欠陥が繰り返し悪用され、サービス拒否が引き起こされる可能性があります。大抵の場合、影響を緩和する回避策が利用可能です。これらの脆弱性は、VU#617947、VU#107186、OUSPG #0100、CVE-2002-0012、CVE-2002-0013 として、さまざまなグループにより特定されます。

The remote host is running an SNMPv1 server that uses a well-known community string - public 

ID	名稱	產品	系列	已發布	已更新	嚴重性
10987	Cisco Malformed SNMP Message Handling DoS (CSCdw67458)	Nessus	CISCO	2002/6/5	2018/6/27	critical
10858	Multiple Vendor Malformed SNMP Trap Handling DoS	Nessus	SNMP	2002/2/13	2018/11/15	medium
48963	Malformed SNMP Message-Handling Vulnerabilities - Cisco Systems	Nessus	CISCO	2010/9/1	2018/11/15	critical
48963	無効な形式の SNMP メッセージ処理の脆弱性 - Cisco Systems	Nessus	CISCO	2010/9/1	2018/11/15	critical
1344	SNMPv1 Public Community String (deprecated)	Nessus Network Monitor	SNMP	2004/8/20	2019/3/6	critical

偵測

搜尋 Plugin

critical

medium

critical

critical

critical