Vulnerabilities > CVE-2001-0514

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
atmel
linksys
netgear
nessus

Summary

SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain access to the network.

Vulnerable Configurations

Part Description Count
Hardware
Atmel
1
Hardware
Linksys
1
Hardware
Netgear
1

Nessus

NASL familySNMP
NASL idSNMP_DEFAULT_COMMUNITIES.NASL
descriptionIt is possible to obtain the default community names of the remote SNMP server. An attacker can use this information to gain more knowledge about the remote host or to change the configuration of the remote system (if the default community allows such modifications).
last seen2020-06-01
modified2020-06-02
plugin id10264
published2002-11-25
reporterThis script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
sourcehttps://www.tenable.com/plugins/nessus/10264
titleSNMP Agent Default Community Names