← Back

CVE-2016-2509

nvd nist
Published: Feb 18, 2016Modified: May 6, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.6 / Impact: 3.6
Source: NVD

Description

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected (3)

Belden
2 products
Hirschmann Firmware
Hirschmann L2b
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hirschmann Firmware
Version 05.3.06
Hirschmann L2b
All versions
Configuration B
1 vulnerable · 4 platform
Vulnerable SoftwareAffected Versions
Hirschmann Firmware
Up to 09.0.05
Running on/withPlatform Versions
Belden
Hirschmann L2e
All versions
Belden
Hirschmann L2p
All versions
Belden
Hirschmann L3e
All versions
Belden
Hirschmann L3p
All versions

Related CWEs

CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

Source: cret@cert.org
Third Party AdvisoryUS Government Resource
Source: cret@cert.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.