CVE-2016-15058 - Vulnerability Analysis

Overview

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P < 09.0.06 and Classic L2B < 05.3.07 contain a credential exposure vulnerability caused by synchronization of user passwords with SNMPv1/v2 community strings transmitted in plaintext, letting attackers with local network access recover plaintext credentials and gain unauthorized administrative access, exploit requires SNMP feature enabled.

Severity & Score

Impact

Attackers with local network access can recover plaintext credentials and gain unauthorized administrative access to switches.

Mitigation

Update to Classic L2E, L2P, L3E, L3P version 09.0.06 or later and Classic L2B version 05.3.07 or later.

References

• https://www.kb.cert.org/vuls/id/507216
• https://www.vulncheck.com/advisories/hirschmann-hilcos-classic-platform-password-exposure-via-snmp
• https://assets.belden.com/m/1d8273c6205dc400/original/Security-Bulletin-Password-Sync-SNMP-v1-v2-BSECV-2016-12.pdf

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner