CVE Vulnerability Advisory Database

[Affected Scope] Zimbra Collaboration (ZCS) versions prior to 10.1.20, specifically when the optional zimbra-snmp package is installed and SNMP notifications are enabled.

[Impact] An unauthenticated remote attacker can execute arbitrary operating system commands as the Zimbra user by sending specially crafted SMTP requests.

[Mitigation] Immediately upgrade Zimbra Collaboration to version 10.1.20 or later, or temporarily disable the zimbra-snmp service.

[Affected Scope] All versions of Cisco IOS and Cisco IOS XE Software with active SNMP services

[Impact] Authenticated attackers can trigger a system reload (DoS) or execute arbitrary code with root privileges (RCE) via crafted SNMP packets

[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access via ACLs, or disable unused SNMP services

[Affected Scope] Cisco Catalyst 2960-L Series, Catalyst Digital Building Series 8P, and 8U Switches running vulnerable Cisco IOS and configured with SNMPv2 or SNMPv3.

[Impact] An authenticated remote attacker can trigger a device reload (Denial of Service) via a SYS-3-CPUHOG error by sending a crafted SNMP GET request for the ciscoFlashMIB OID.

[Mitigation] Apply the official Cisco IOS software updates, or implement SNMP MIB views to exclude access to the ciscoFlashMIB OID and restrict SNMP access using ACLs.

[Affected Scope] Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] An authenticated, remote attacker can execute arbitrary code with full system control or cause a denial of service (system reload)

[Mitigation] Apply official Cisco software updates, or implement workarounds by restricting SNMP views to exclude vulnerable MIBs and enforcing ACLs

[Affected Scope] Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] Authenticated remote attackers can execute arbitrary code with full system privileges or trigger a device reload (DoS) via crafted SNMP packets

[Mitigation] Apply official Cisco software updates, restrict SNMP access using ACLs, enforce strong community strings/credentials, or disable vulnerable MIB views

[Affected Scope] Cisco IOS and IOS-XE devices with active SNMP services and exposed valid credentials (community strings or SNMPv3 users)

[Impact] An authenticated remote attacker can send crafted SNMP packets to trigger a buffer overflow, causing a system reload (DoS) or executing arbitrary code with full administrative privileges

[Mitigation] Apply official Cisco software updates, restrict SNMP access using strict Access Control Lists (ACLs), or disable SNMP services if not required

[Affected Scope] All Cisco devices running Cisco IOS or IOS XE software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] An authenticated, remote attacker can execute arbitrary code with full system privileges or trigger a device reload, causing a complete Denial of Service (DoS)

[Mitigation] Apply official software updates via Cisco IOS Software Checker, or implement workarounds including SNMP View restrictions and Access Control Lists (ACLs)

[Affected Scope] Cisco IOS and IOS-XE devices with active SNMP services and exposed community strings or user credentials.

[Impact] Authenticated remote attackers can trigger a buffer overflow via crafted SNMP packets, leading to system reload (DoS) or full remote code execution (RCE) with administrative privileges.

[Mitigation] Apply official Cisco software updates, restrict SNMP access using strict Access Control Lists (ACLs), or disable SNMP services if not required.

[Affected Scope] Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] Authenticated remote attackers can execute arbitrary code with full system control or trigger a device reload by sending crafted SNMP packets

[Mitigation] Apply official software updates via Cisco IOS Software Checker, or implement SNMPv3 hardening and MIB filtering workarounds

[Affected Scope] Cisco IOS and IOS-XE network devices with active SNMP services and exposed valid credentials (community strings or SNMPv3 user credentials).

[Impact] An authenticated, remote attacker can send crafted SNMP packets to trigger a buffer overflow, leading to a system reload or arbitrary remote code execution (RCE) with full administrative control.

[Mitigation] Apply official Cisco software patches immediately, or restrict SNMP access using Infrastructure ACLs and enforce complex community strings as a temporary workaround.

[Affected Scope] All Cisco devices running Cisco IOS and IOS XE Software with SNMP enabled and affected MIBs/OIDs not explicitly excluded

[Impact] Authenticated remote attackers can execute arbitrary code with full system privileges or trigger a device reload, leading to complete infrastructure compromise or denial of service

[Mitigation] Apply fixed software versions via Cisco IOS Software Checker, or implement workarounds including SNMP community ACLs, MIB view restrictions, or disabling SNMP

[Affected Scope] Siemens SIMATIC CP 1543-1 and SIPLUS NET CP 1543-1 (All versions < V2.0.28)

[Impact] Unauthorized modification of read-only SNMP variables via port 161/udp, potentially leading to reduced availability or Denial-of-Service (DoS)

[Mitigation] Immediately upgrade firmware to V2.0.28 or higher, and restrict access to port 161/udp using network firewalls

[Affected Scope] Cisco Adaptive Security Appliance (ASA) Software through 9.4.2.3 on ASA 5500, 5500-X, ASAv, Firepower 9300, PIX, and FWSM devices

[Impact] Remote authenticated attackers can exploit this vulnerability to execute arbitrary code (RCE) with elevated privileges or cause a denial of service (DoS) via crafted IPv4 SNMP packets

[Mitigation] Apply official Cisco software updates immediately, restrict SNMP access using strict Access Control Lists (ACLs), and rotate SNMP community strings