Vulnerability Details CVE-2006-5382
3Com Switch SS3 4400 switches, firmware 5.11, 6.00 and 6.10 and earlier, allow remote attackers to read the SNMP Read-Write Community string and conduct unauthorized actions via unspecified "normally restricted management packets on the device" that cause the community string to be returned.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.012
EPSS Ranking 77.6%
CVSS Severity
CVSS v2 Score 7.5
References
- http://secunia.com/advisories/22818
- http://securitytracker.com/id?1017128
- http://www.3com.com/securityalert/alerts/3COM-06-004.html
- http://www.securityfocus.com/bid/20736
- http://www.vupen.com/english/advisories/2006/4184
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29779
- http://secunia.com/advisories/22818
- http://securitytracker.com/id?1017128
- http://www.3com.com/securityalert/alerts/3COM-06-004.html
- http://www.securityfocus.com/bid/20736
- http://www.vupen.com/english/advisories/2006/4184
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29779
Products affected by CVE-2006-5382
-
cpe:2.3:h:3com:superstack_3_switch_4400:*
-
cpe:2.3:h:3com:superstack_3_switch_4400:firmware_5.11
-
cpe:2.3:h:3com:superstack_3_switch_4400:firmware_6.00