CVE-2012-3268

Description

Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei Firewall/Gateway, Router, Switch, and Wireless products do not properly implement access control as defined in h3c-user.mib 2.0 and hh3c-user.mib 2.0, which allows remote authenticated users to discover credentials in UserInfoEntry values via an SNMP request with the read-only community.

Category

3.5
CVSS
Severity: Low
CVSS 2.0 •
EPSS 1.34% Top 25%
Vendor Advisory hp.com Vendor Advisory huawei.com
Affected: n/a n/a
Published at:
Updated at:

References

Link Tags
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c03515685 vendor advisory broken link
http://www.kb.cert.org/vuls/id/MORO-8ZDJDP third party advisory us government resource
http://www.securityfocus.com/bid/56183 third party advisory vdb entry
http://support.huawei.com/support/pages/news/NewsInfoAction.do?doc_id=IN0000054930&colID=ROOTENWEB%7CCO0000000170&actionFlag=view
http://www.kb.cert.org/vuls/id/225404 third party advisory us government resource
http://www.securitytracker.com/id?1027694 third party advisory vdb entry
http://archives.neohapsis.com/archives/bugtraq/2012-10/0123.html broken link mailing list
http://grutztopia.jingojango.net/2012/10/hph3c-and-huawei-snmp-weak-access-to.html third party advisory
http://support.huawei.com/enterprise/NewsReadAction.action?newType=0301&contentId=NEWS1000001165&idAbsPath=0301_10001&nameAbsPath=Services%2520News vendor advisory

Frequently Asked Questions

What is the severity of CVE-2012-3268?
CVE-2012-3268 has been scored as a low severity vulnerability.
How to fix CVE-2012-3268?
To fix CVE-2012-3268, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2012-3268 being actively exploited in the wild?
It is possible that CVE-2012-3268 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.
This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.
© 2025 Under My Watch. All Rights Reserved.