First published: Fri Feb 01 2013(Updated: )
Certain HP Access Controller, Fabric Module, Firewall, Router, Switch, and UTM Appliance products; certain HP 3Com Access Controller, Router, and Switch products; certain HP H3C Access Controller, Firewall, Router, Switch, and Switch and Route Processing Unit products; and certain Huawei Firewall/Gateway, Router, Switch, and Wireless products do not properly implement access control as defined in h3c-user.mib 2.0 and hh3c-user.mib 2.0, which allows remote authenticated users to discover credentials in UserInfoEntry values via an SNMP request with the read-only community.
Credit: hp-security-alert@hp.com
Affected Software | Affected Version | How to fix |
---|---|---|
HP LaserJet MFP M141 | ||
HP 0150 | ||
HP 0150 | ||
HP 0150a12c | ||
HP 023x Model Series | ||
HP 0231a65t | ||
HP 0231a761 | ||
HP 0231a832 | ||
HP 0231a86p | ||
HP Envy Pro 6400 | ||
HP 0231a88l | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a08m | ||
HP 0235 | ||
HP 0235a0a7 | ||
HP 0235 | ||
HP 0235a0as | ||
HP 0235a0bq | ||
HP 0235a0br | ||
HP 0235a0bs | ||
HP 0235a0bt | ||
HP 0235a0bu | ||
HP 0235a0b | ||
HP 0235a0c0 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a0ct | ||
HP 0235 | ||
HP 0235a0e5 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a0g0 | ||
HP 0235a0g1 | ||
HP 0235a0g2 | ||
HP 0235a0g3 | ||
HP 0235a0g4 | ||
HP 0235a0g5 | ||
HP 0235a0g6 | ||
HP 0235a0g7 | ||
HP 0235a0g8 | ||
HP 0235a0g9 | ||
HP 0235 | ||
HP 0235a0gc | ||
HP 0235a0gd | ||
HP 0235a0ge | ||
HP 0235a0gf | ||
HP 0235a10b | ||
HP 0235 | ||
HP 0235a10d | ||
HP 0235a10e | ||
HP 0235a | ||
HP 0235a10g | ||
HP 0235a10h | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a10l | ||
HP 0235 | ||
HP 0235a14w | ||
HP 0235a15b | ||
HP 0235a15c | ||
HP 0235 | ||
HP 0235a15f | ||
HP 0235a15g | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a19c | ||
HP 0235a19d | ||
HP 0235a19h | ||
HP 0235a19j | ||
HP 0235a19k | ||
HP 0235a19l | ||
HP 0235a20j | ||
HP 0235a20k | ||
HP 0235a20l | ||
HP 0235 | ||
HP 0235a20p | ||
HP 0235a20q | ||
HP 0235a20r | ||
HP 0235a20s | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a22c | ||
HP 0235a | ||
HP 0235 | ||
HP 0235a22f | ||
HP 0235 | ||
HP 0235a22k | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a22 | ||
HP 0235 | ||
HP 0235a238 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a25r | ||
HP 0235a25s | ||
HP 0235a267 | ||
HP 0235a | ||
HP 0235a269 | ||
HP 0235a26g | ||
HP 0235 | ||
HP 0235a27q | ||
HP 0235a27r | ||
HP 0235a27s | ||
HP 0235 | ||
HP 0235a | ||
HP 0235 | ||
HP 0235a299 | ||
HP 0235a29a | ||
HP 0235 | ||
HP 0235a29y | ||
HP 0235a300 | ||
HP 0235 | ||
HP 0235a31b | ||
HP 0235a31c | ||
HP 0235a31d | ||
HP 0235a31e | ||
HP 0235a31n | ||
HP 0235a31p | ||
HP 0235a31q | ||
HP 0235a31r | ||
HP 0235a31v | ||
HP 0235a31w | ||
HP 0235a31x | ||
HP 0235a320 | ||
HP 0235a321 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a324 | ||
HP 0235 | ||
HP 0235a326 | ||
HP 0235a327 | ||
HP 0235a328 | ||
HP 0235 | ||
HP 0235a32e | ||
HP 0235a32g | ||
HP 0235a32x | ||
HP 0235a33r | ||
HP 0235a34b | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a36q | ||
HP 0235 | ||
HP 0235a37u | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235a38p | ||
HP 0235a38q | ||
HP 0235a38r | ||
HP 0235a38v | ||
HP 0235 | ||
HP 0235a391 | ||
HP 0235 | ||
HP 0235 | ||
HP 0235 Series | ||
HP 0235 | ||
HP 0235a | ||
HP 0235a39h | ||
HP 0235 | ||
HP 0235a42b | ||
HP 0235 | ||
HP 0235 | ||
HP 3c13612 | ||
HP 3c13613 | ||
HP 3c13616 | ||
HP 3c13636 | ||
HP 3c13640 | ||
HP 3c13641 | ||
HP 3c13701 | ||
HP 3c13751 | ||
HP 3c13759 | ||
HP 3c13840 | ||
HP 3c17302a | ||
HP 3c17304a | ||
HP 3c17540 | ||
HP 3c17540 | ||
HP 3c17541 | ||
HP 3c17541taa | ||
HP 3c17543 | ||
HP 3c17543taa | ||
HP 3CR17151-91 | ||
HP 3CR17152-91 | ||
HP 3CR17161TAA-91 | ||
HP 3CR17161TAA-91 | ||
HP 3CR17162TAA-91 | ||
HP 3CR17162TAA-91 | ||
HP 3cr17171taa-91 | ||
HP 3Com Switch 17171 | ||
HP 3cr17172-91 | ||
HP 3CR17172TAA-91 | ||
HP 3cr17181taa-91 | ||
HP 3CR17181TAA-91 | ||
HP 3CR17250-91 | ||
HP 3CR17250-91 | ||
HP 3CR17251-91 | ||
HP 3cr17251-91 | ||
HP 3CR17252TAA-91 | ||
HP 3CR17253-91 | ||
HP 3cr17253-91 | ||
HP 3CR17254-91 | ||
HP 3CR17258TAA-91 | ||
HP 3CR17258-91 | ||
HP 3CR17259-91 | ||
HP 3cr17331taa-91 | ||
HP 3CR17331A-91 | ||
HP 3CR17331TAA-91 | ||
HP 3CR17332A-91 | ||
HP 3CR17332A-91 | ||
HP 3CR17333A-91 | ||
HP 3CR17333A-91 | ||
HP 3CR17334-91 | ||
HP 3CR17341A-91 | ||
HP 3CR17341A-91 | ||
HP 3CR17341TAA-91 | ||
HP 3CR17342-91 | ||
HP 3CR17343A-91 | ||
HP 3CR17343A-91 | ||
HP 3CR17561-91 | ||
HP 3CR17562-91 | ||
HP 3CR17571-91 | ||
HP 3CR17572-91 | ||
HP 3CR17660-91 | ||
HP 3cr17661-91 | ||
HP 3CR17662-91 | ||
HP 3Com Router | ||
HP 3CR17761TAA-91 | ||
HP 3CR17761TAA-91 | ||
HP 3Com 3CR17762-91 | ||
HP 3CR17762TAA-91 | ||
HP 3CR17771-91 | ||
HP 3CR17771-91 | ||
HP 3CR17772-91 | ||
HP 3CR17772-91 | ||
HP 3CRBSG2093 | ||
HP 3CRBSG2893 | ||
HP 3CRBSG28PWR93 | ||
HP 3CRBSG28PWR93 | ||
HP 3CRBSG5293 | ||
HP 3CRBVCXMSR01A | ||
HP 3CRBVCXMSR02A | ||
HP 3CRBVCXCMSR03A | ||
HP 3CRBVCXMSR05A | ||
HP 3CRBVCXMSR06A | ||
HP 3CRBVCXMSR07A | ||
HP 3CRBVCXMSR08A | ||
HP 3CRS42G-24-91 | ||
HP Networking Switch 3CRS42G-24P-91 | ||
HP 3CRS42G-48-91 | ||
HP 3CRS48G-24-91 | ||
HP 3Com Switch 3CRS45G-48-91 | ||
HP 3Com Switch 3CRS48G-24S-91 | ||
HP 3CRS48G-24-91 | ||
HP 3com Switch 3CRS48G-24S-91 | ||
HP 3crs45g-48-91 | ||
HP 3Com Switch 3CRS48G-48P-91 | ||
HP 3CRUWX500275 | ||
HP 3CRUWX500475 | ||
HP 3cs7902e | ||
HP 3Com Switch | ||
HP 3Com Switch | ||
HP 3c7906e | ||
HP 3Com 7900 Series Switch | ||
HP jc054a | ||
HP jc055a | ||
HP jc056a | ||
HP jc085a | ||
HP jc086a | ||
HP JC099A | ||
HP jc100a | ||
HP jc101a | ||
HP jc103a | ||
HP jc104a | ||
HP je105a | ||
HP jc124b | ||
HP jc125a | ||
HP jc125b | ||
HP jc147a | ||
HP jc147b | ||
HP jc148a | ||
HP jc148b | ||
HP jc149a | ||
HP jc149b | ||
HP JC150A Switch Module | ||
HP JC150B | ||
HP jc158a | ||
HP jc165a | ||
HP jc176a | ||
HP jc177a | ||
HP jc177b | ||
HP jc178a | ||
HP JC178B | ||
HP JC474A | ||
HP JC474B | ||
HP jc496a | ||
HP JC566A | ||
HP JC611A | ||
HP JC612A | ||
HP jc613a | ||
HP Jetdirect 635n | ||
HP jc652a | ||
HP JC653A | ||
HP JD666A | ||
HP jc691a | ||
HP JC694A | ||
HP JC697A | ||
HP JC698A | ||
HP jc699a | ||
HP JC700A | ||
HP JC701A | ||
HP jc748a | ||
HP JE007A | ||
HP JE008A | ||
HP jd009a | ||
HP JD Series | ||
HP JD Series | ||
HP jd023a | ||
HP JetDirect | ||
HP JD025A | ||
HP JE026A | ||
HP JD027A | ||
HP JD028A | ||
HP JE029A | ||
HP JD172A | ||
HP JD193A | ||
HP JD193B | ||
HP JD194A | ||
HP JetDirect | ||
HP JD238A | ||
HP JD238B | ||
HP jg239a | ||
HP JD239B | ||
HP JF240A | ||
HP JD240B | ||
HP JD Series | ||
HP JD241B | ||
HP jg242a | ||
HP JD242B | ||
HP JD243A | ||
HP JD243B | ||
HP jd245a | ||
HP JD249A | ||
HP JD250A | ||
HP jg251a | ||
HP jd268a | ||
HP JD Series | ||
HP JD273A | ||
HP JD274A | ||
HP JD275A | ||
HP JC302A | ||
HP jd303a | ||
HP JD Series | ||
HP JD305A | ||
HP JD306A | ||
HP JD307A | ||
HP JD308A | ||
HP JD Series | ||
HP JD310A | ||
HP JD311A | ||
HP JD Series | ||
HP JD313A | ||
HP JD313B | ||
HP JD314A | ||
HP 315 | ||
HP JD316A | ||
HP JD317A | ||
HP JD318A | ||
HP JD318B | ||
HP JD319A | ||
HP JD319B | ||
HP JD320A | ||
HP JD320B | ||
HP JD325A | ||
HP JD326A | ||
HP JD Series | ||
HP jd328a | ||
HP JD329A | ||
HP jd330a | ||
HP JD331A | ||
HP JD332A | ||
HP JD333A | ||
HP JD334A | ||
HP JD335A | ||
HP JD336A | ||
HP jd337a | ||
HP JD338A | ||
HP JD344A | ||
HP JD345A | ||
HP jd346a | ||
HP JD347A | ||
HP jg348a | ||
HP jg349a | ||
HP JD350A | ||
HP jd351a | ||
HP JD352A | ||
HP jd353a | ||
HP JD354A | ||
HP JD355A | ||
HP JD356A | ||
HP JD357A | ||
HP JD369A | ||
HP JD370A | ||
HP jd371a | ||
HP jd372a | ||
HP jd373a | ||
Hewlett-Packard JD374A | ||
HP JD375A | ||
HP JD376A | ||
HP JD377A | ||
HP JD378A | ||
HP JD379A | ||
HP JD431A | ||
HP jd432a | ||
HP jd433a | ||
HP JD444A | ||
HP JD447 | ||
HP JD447 | ||
HP JD448A | ||
HP JD448B | ||
HP JD449A | ||
HP jd450a | ||
HP JD468A | ||
HP jd469a | ||
HP JD654A | ||
HP JD655A | ||
HP JD656A | ||
HP JD Series | ||
HP jd658a | ||
HP JD659A | ||
HP JD660A | ||
HP jd661a | ||
HP JD662A | ||
HP jd663a | ||
HP JD663B | ||
HP JD664A | ||
HP JD665A | ||
HP JD666A | ||
HP JD667A | ||
HP JD668A | ||
HP jd669a | ||
HP JD Series | ||
HP JD671A | ||
HP JD672A | ||
HP JD673A | ||
HP JD Series | ||
HP JD675A | ||
HP jd676a | ||
HP JD916A | ||
HP JD917A | ||
HP jd918a | ||
HP jd921a | ||
HP JD Series | ||
HP JD923A | ||
HP JD935A (ProCurve Switch) | ||
HP JD943A | ||
HP JD946A | ||
HP JD967A | ||
HP JD972A | ||
HP JE005A | ||
HP ProCurve Switch 2510-24 | ||
HP JE007A | ||
HP JE008A | ||
HP ProCurve 1810G-24 Switch | ||
HP je012a | ||
HP JE013A | ||
HP JE015A | ||
HP je016a | ||
HP JE018A | ||
HP JE020A | ||
HP 2810-24 Switch | ||
HP JE022A | ||
HP je023a | ||
HP JE025A | ||
HP JE026A | ||
HP JD027A | ||
HP JD028A | ||
HP JE029A | ||
HP je030a | ||
HP Product je031a | ||
HP JE032A | ||
HP je033a | ||
HP JE045A | ||
HP je046a | ||
HP je048a | ||
HP JE057A | ||
HP JE058A | ||
HP jg059a | ||
HP JE060A | ||
HP JE061A | ||
HP JE062A | ||
HP JE063A | ||
HP JE064A | ||
HP je066a | ||
HP JE067A | ||
HP JE068A | ||
HP JE069A | ||
HP je070a | ||
HP je071a | ||
HP je072a | ||
HP ProCurve 2620-48 Switch | ||
HP ProCurve 2520-24 Switch | ||
HP je088a | ||
HP je089a | ||
HP je090a | ||
HP JE091A | ||
HP jg092a | ||
HP JE093A | ||
HP je094a | ||
HP JE095A | ||
HP ProCurve 2810 | ||
HP JE097A | ||
HP ProCurve Switch 2510-48 | ||
HP JE100A | ||
HP JE101A | ||
HP JE102A | ||
HP je103a | ||
HP je104a | ||
HP JC105A | ||
HP JE106A | ||
HP je107a | ||
HP JE108A | ||
HP je109a | ||
HP je110a | ||
HP JE164A | ||
HP je165a | ||
HP Networking Switch JE166A | ||
HP JE167A | ||
HP je168a | ||
HP ProLiant DL380 Gen9 | ||
HP je199a | ||
HP je200a | ||
HP JE201A | ||
HP je203a | ||
HP je204a | ||
HP je526a | ||
HP je527a | ||
HP JE528A | ||
HP je545a | ||
Hewlett-Packard JF551A | ||
HP JF228A | ||
HP jf229a | ||
HP jf230a | ||
HP JF231A | ||
HP jf232a | ||
HP jf233a | ||
HP jf234a | ||
HP jf235a | ||
HP JF236A | ||
HP jf237a | ||
HP jf238a | ||
HP jf239a | ||
HP ProCurve Switch JF240A | ||
HP jf241a | ||
HP JD242A | ||
HP jf247a | ||
HP JF283A | ||
HP JF284A | ||
HP JF285A | ||
HP JF286A | ||
HP ProCurve Switch 2920-48G | ||
HP jf427a | ||
HP jf428a | ||
HP JF430A | ||
HP jf430c | ||
HP JD431A | ||
HP JF431C | ||
Hewlett-Packard JF551A | ||
HP jf552a | ||
HP jf553a | ||
HP JF640A | ||
HP jf800a | ||
HP jf801a | ||
HP jf802a | ||
HP JF803A | ||
HP JF804A | ||
HP JF806A | ||
HP jf807a | ||
HP jf808a | ||
HP jf809a | ||
HP jf812a | ||
HP jf813a | ||
HP JF814A | ||
HP JF815A | ||
HP JF816A | ||
HP jf817a | ||
HP jf844a | ||
HP JF845A | ||
HP jf846a | ||
HP jf847a | ||
HP ProCurve Switch 2524 | ||
HP JE091A | ||
HP jg092a | ||
HP jg182a | ||
HP jg183a | ||
HP jg184A | ||
HP JG207A | ||
HP jg208a | ||
HP 2920 Switch | ||
HP jg210a | ||
HP jg213a | ||
HP ProCurve 3500-24P | ||
HP jg215a | ||
HP ProCurve 2510-24 Switch | ||
HP jg222a | ||
HP 223r9a | ||
HP jg225a | ||
HP jg236a | ||
HP jg237a | ||
HP jg238a | ||
HP jg239a | ||
HP jg240a | ||
HP jf241a | ||
HP jg242a | ||
HP jg245a | ||
HP jg246a | ||
HP jg247a | ||
HP jg248a | ||
HP jg249A | ||
HP jg250a | ||
HP jg251a | ||
HP jg252a | ||
HP jg253a | ||
HP jg254a | ||
HP jg255a | ||
HP jg256a | ||
HP jg257a | ||
HP jg258a | ||
HP V1910-24G Switch (JG299A) | ||
HP jg300a | ||
HP jg301a | ||
HP jg302a | ||
HP jg303a | ||
HP jg304a | ||
HP jg305a | ||
HP JD307A | ||
HP A-MSR Access Point Series | ||
HP JG312A | ||
HP 315 | ||
HP JD348A | ||
HP jg349A | ||
HP JG350A | ||
HP jg478a | ||
HP ProCurve 2610-24 | ||
HP jr430b | ||
HP jr431b | ||
HP JC653A | ||
HP lsq1fwbsc0 | ||
HP lsq1srpd0 | ||
HP lsr1fw2a1 | ||
HP rpe-x1 | ||
HP RTVZ33020AS | ||
Huawei MA5200G | =v300r003 | |
Huawei ATB | =v200r001c00 | |
Huawei ATN | =v200r001c01 | |
Huawei CX600 firmware | =v200r002 | |
Huawei CX600 firmware | =v600r001 | |
Huawei CX600 firmware | =v600r002 | |
Huawei CX600 firmware | =v600r003 | |
Huawei MA5200G | =v200r003 | |
Huawei ME60 | =v100r005 | |
Huawei ME60 | =v100r006 | |
Huawei ME60 | =v600r002 | |
Huawei ME60 | =v600r003 | |
Huawei ME60 | =v600r005c00spc600 | |
Huawei NE20 | =v200r005 | |
Huawei NE20E-X6 | =v600r003 | |
Huawei NE40&80 | =v300r005 | |
Huawei NE40E&80E | =v300r003 | |
Huawei NE40E&80E | =v600r001 | |
Huawei NE40E&80E | =v600r002 | |
Huawei NE40E&80E | =v600r003 | |
Huawei NE Router Software | =v300r007 | |
Huawei NE Router Software | =v800r002 | |
Huawei NE Router Software | =v800r003 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2012-3268 has a high severity rating as it allows unauthorized access and potential manipulation of device configurations.
To mitigate CVE-2012-3268, it's recommended to disable SNMP access or apply available security patches from HP and Huawei.
CVE-2012-3268 affects certain HP Access Controllers, Firewalls, Routers, Switches, and various Huawei appliances.
CVE-2012-3268 is classified as an SNMP access vulnerability that can lead to unauthorized configuration changes.
As a temporary workaround for CVE-2012-3268, restricting SNMP access to trusted IP addresses can help minimize the risk.