CVE-2008-0960
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 ...
Affects 25 products across 6 vendors.
Software does not prove or insufficiently proves that the user is who they claim to be.
Show all 10
Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.
{ "executive_summary": "A critical vulnerability in SNMPv3 HMAC verification affects multiple versions of Net-SNMP and other SNMP implementations, potentially allowing remote attackers to bypass authentication and access sensitive information or perform unauthorized actions.", "attack_vector_detail": "The vulnerability stems from improper handling of HMAC verification in SNMPv3, which could be exploited by an attacker to send specially crafted packets that bypass authentication checks.", "affected_components": [ "Net-SNMP 5.2.x before 5.2.4.1", "Net-SNMP 5.3.x before 5.3.2.1", "Net-SNMP 5.4.x before 5.4.1.1", "UCD-SNMP", "eCos", "Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0", "NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2", "SNMP Research before 16.2", "Cisco IOS", "Cisco CatOS", "Cisco ACE",
BSID: BS-2008-GLOBAL-160532-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2008-0960?
What is the CVSS score for CVE-2008-0960?
Is CVE-2008-0960 actively exploited?
How do I remediate CVE-2008-0960?
What systems are affected by CVE-2008-0960?
| CVE ID | CVE-2008-0960 |
|---|---|
| BSID | BS-2008-GLOBAL-160532-C BreachSpider Global ID |
| CVSS Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| Published | 2008-06-10 |
| Last Modified | 2026-06-16 |
| ICS Relevance | 100% |
| Weakness (CWE) | |
| Domains | |
| Source | NVD |
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC) C-series 1.0.0 through 2.0.0; (5) NetApp (aka Network Appliance) Data ONTAP 7.3RC1 and 7.3RC2; (6) SNMP Research before 16.2; (7) multiple Cisco IOS, CatOS, ACE, and Nexus products; (8) Ingate Firewall 3.1.0 and later and SIParator 3.1.0 and later; (9) HP OpenView SNMP Emanate Master Agent 15.x; and possibly other products relies on the client to specify the HMAC length, which makes it easier for remote attackers to bypass SNMP authentication via a length value of 1, which only checks the first byte.
Source: NIST NVD / MITRE CVE Database
| Vendor | Product | Affected Versions |
|---|---|---|
| Cisco | Mds 9134 | — |
| Cisco | Mds 9140 | — |
| Cisco | Ios | — |
| Cisco | Catos | — |
| Cisco | Ios Xr | — |
| Cisco | Cisco Ios | — |
| Cisco | Nx Os | — |
| Cisco | Ace 10 6504 Bundle With 4 Gbps Throughput | — |
| Cisco | Ace 10 6509 Bundle With 8 Gbps Throughput | — |
| Cisco | Ace 10 Service Module | — |
| Cisco | Ace 20 6504 Bundle With 4Gbps Throughput | — |
| Cisco | Ace 20 6509 Bundle With 8Gbps Throughput | — |
| Cisco | Ace 20 Service Module | — |
| Cisco | Ace 4710 | — |
| Cisco | Ace Xml Gateway | — |
| Cisco | Mds 9120 | — |
| Cisco | Mds 9124 | — |
| Ecos Sourceware | Ecos | — |
| Ingate | Ingate Firewall | — |
| Ingate | Ingate Siparator | — |
| Juniper | Session And Resource Control | 1.0 2.0 |
| Juniper | Src Pe | 1.0 2.0 |
| Net-Snmp | Net Snmp | — |
| Sun | Solaris | — |
| Sun | Sunos | — |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | ⚠ Available — Reference |
| PoC Code | Not confirmed |
AI Enrichment Record — provenance & audit hash
| Model | /workspace/models/qwen2.5-coder-32b-instruct-bf16 |
|---|---|
| Enriched At | 2026-05-25 |
Critical Severity - Know Your Exposure
A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →