Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.

Multiple Cisco products contain vulnerabilities in the processing of Simple Network Management Protocol (SNMP) messages. The vulnerabilities can be repeatedly exploited to produce a denial of service. In most cases, workarounds are available that may mitigate the impact. These vulnerabilities are identified by various groups as VU#617947, VU#107186, OUSPG #0100, CVE-2002-0012, and CVE-2002-0013.

The remote host is running an SNMPv1 server that uses a well-known community string - public 

There is a vulnerability in the way the remote device handles SNMP messages. An attacker may use this flaw to crash the remote device continuously.

This vulnerability is documented as Cisco bug ID CSCdw67458.

It was possible to disable the remote SNMP daemon by sending a malformed packet advertising bogus length fields.

An attacker may use this flaw to prevent you from using SNMP to administer your network (or use other flaws to execute arbitrary code with the privileges of the SNMP daemon).

ID	Name	Product	Family	Severity
48963	Malformed SNMP Message-Handling Vulnerabilities - Cisco Systems	Nessus	CISCO	critical
1344	SNMPv1 Public Community String (deprecated)	Nessus Network Monitor	SNMP	critical
10987	Cisco Malformed SNMP Message Handling DoS (CSCdw67458)	Nessus	CISCO	critical
10858	Multiple Vendor Malformed SNMP Trap Handling DoS	Nessus	SNMP	medium

Detections

Analytics

CVE-2002-0012

critical

Tenable Plugins

critical

critical

critical

medium