According to the versions of the net-snmp packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - Net-SNMP through 5.7.3 has Improper Privilege     Management because SNMP WRITE access to the EXTEND MIB     provides the ability to run arbitrary commands as     root.(CVE-2020-15862)

  - Net-SNMP through 5.7.3 allows Escalation of Privileges     because of UNIX symbolic link (symlink)     following.(CVE-2020-15861)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2021:0257 advisory.

  - net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution     (CVE-2020-15862)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
147698	EulerOS Virtualization 2.9.0 : net-snmp (EulerOS-SA-2021-1660)	Nessus	Huawei Local Security Checks	3/11/2021	1/10/2024	high
164599	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.5)	Nessus	Misc.	9/1/2022	4/8/2024	critical
145701	RHEL 7 : net-snmp (RHSA-2021:0257)	Nessus	Red Hat Local Security Checks	2/1/2021	4/24/2024	high

Detections

Analytics

Plugins Search

high

critical

high