Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-perlUpgrade net-snmp-agent-libsUpgrade net-snmp-libsUpgrade net-snmp-devel | May 4, 2022 | Aug 20, 2020 |
| Amazon Linux Ami 2 | — | Upgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-develUpgrade net-snmp-guiUpgrade net-snmp-utilsUpgrade net-snmp-perlUpgrade net-snmp-pythonUpgrade net-snmp-sysvinitUpgrade net-snmp-debuginfoUpgrade net-snmp | Jan 8, 2021 | Aug 20, 2020 |
| Amazon_linux | — | Upgrade net-snmp | Jan 15, 2021 | Aug 20, 2020 |
| Centos_linux | — | Upgrade net-snmp-libsUpgrade net-snmp-perlUpgrade net-snmp-guiUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-utilsUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-develUpgrade net-snmpUpgrade net-snmp-pythonUpgrade net-snmp-debuginfoUpgrade net-snmp-sysvinitUpgrade net-snmp-agent-libs-debuginfoUpgrade net-snmp-debugsourceUpgrade net-snmp-agent-libs | Nov 18, 2020 | Aug 20, 2020 |
| Debian | — | Upgrade net-snmp | Aug 4, 2020 | Aug 4, 2020 |
| Gentoo Linux | — | Upgrade net-analyzer/net-snmp. | Aug 27, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp2 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-devel | Nov 3, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp3 | — | Upgrade net-snmp-develUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp | Sep 28, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp5 | — | Upgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-devel | Nov 2, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp8 | — | Upgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-utilsUpgrade net-snmp-libsUpgrade net-snmp-devel | Sep 29, 2020 | Aug 20, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-net-snmpUpgrade net-snmp-libsUpgrade net-snmp | Oct 13, 2020 | Aug 20, 2020 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Aug 24, 2022 |
| Oracle_linux | — | Upgrade net-snmp-develUpgrade net-snmp-perlUpgrade net-snmpUpgrade net-snmp-libsUpgrade net-snmp-agent-libsUpgrade net-snmp-guiUpgrade net-snmp-utilsUpgrade net-snmp-sysvinitUpgrade net-snmp-python | Nov 19, 2020 | Aug 25, 2020 |
| Redhat_linux | — | Upgrade net-snmp-sysvinitUpgrade net-snmp-guiUpgrade net-snmp-utilsUpgrade net-snmp-debuginfoUpgrade net-snmpUpgrade net-snmp-agent-libsUpgrade net-snmp-perl-debuginfoUpgrade net-snmp-libs-debuginfoUpgrade net-snmp-agent-libs-debuginfoNo solution existsUpgrade net-snmp-pythonUpgrade net-snmp-libsUpgrade net-snmp-develUpgrade net-snmp-debugsourceUpgrade net-snmp-utils-debuginfoUpgrade net-snmp-perl | Nov 18, 2020 | Aug 20, 2020 |
| Suse | — | Upgrade libsnmp30Upgrade snmp-mibsUpgrade python3-net-snmpUpgrade libsnmp30-32bitUpgrade net-snmp-develUpgrade perl-SNMPUpgrade net-snmp-devel-32bitUpgrade python2-net-snmpUpgrade net-snmp | Dec 28, 2021 | Aug 20, 2020 |
| Ubuntu | — | Upgrade libsnmp-baseUpgrade libsnmp15Upgrade libsnmp30 (Ubuntu Pro)Upgrade libsnmp35Upgrade libsnmp30Upgrade snmpdUpgrade libsnmp-base (Ubuntu Pro)Upgrade libsnmp-perlUpgrade libsnmp-perl (Ubuntu Pro)Upgrade snmpd (Ubuntu Pro) | Aug 25, 2020 | Aug 20, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 19, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub