Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0517 — HP Hp-ux vulnerability

12 documents6 sources
Severity
7.5HIGHNVD
EPSS
92.4%
top 0.27%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
2
HP Hp-uxSUN Sunos
Timeline
PublishedJan 1
Latest updateJan 30

Description

An SNMP community name is the default (e.g. public), null, or missing.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages2 packages

▶NVDhp/hp-ux10, 11.00+1
▶NVDsun/sunos5.0

🔴Vulnerability Details

2
GHSA
GHSA-wvmj-jgmg-4ghq: An SNMP community name is the default (e↗2022-04-30
▶
CVEList
CVE-1999-0517: An SNMP community name is the default (e↗2000-02-04
▶

💥Exploits & PoCs

2
Metasploit
SNMP Enumeration Module↗
▶
Metasploit
SNMP Community Login Scanner↗
▶

🔍Detection Rules

6
Suricata
ET SNMP missing community string attempt 1↗2013-01-09
▶
Suricata
ET SNMP missing community string attempt 2↗2013-01-09
▶
Suricata
ET SNMP missing community string attempt 4↗2013-01-09
▶
Suricata
GPL SNMP public access udp↗2010-09-23
▶
Suricata
GPL SNMP null community string attempt↗2010-09-23
▶

📄Research Papers

1
arXiv
Walking Under the Ladder Logic: PLC-VBS, a PLC Control Logic Vulnerability Discovery Tool↗2023-01-30
▶
CVE-1999-0517 — HP Hp-ux vulnerability | cvebase