Title: 3Com SS3 4400 Switch Information Disclosure Vulnerability
Severity: MODERATE
Description:
3Com SS3 4400 Switch products are devices that provide network connectivity.
These devices are prone to an information-disclosure vulnerability because they fail to properly secure access to network-management packet data. An attacker may monitor traffic to disclose high-level SNMP information, specifically SNMP read/write community strings.
An attacker can exploit this issue to retrieve potentially sensitive information. The impact of successful exploits may allow various operations on the device, including disabling ports and reconfiguring a VLAN.
Note that this issue may be exploited only through the management VLAN that the affected device is connected to.
Firmware versions 5.11, 6.00, and 6.10 or earlier are vulnerable.
Affected Products:
- 3Com SuperStack 3 Switch 4400.0.0
- 3Com SuperStack 3 Switch 4400.0.0 FX
- 3Com SuperStack 3 Switch 4400.0.0 PWR
- 3Com SuperStack 3 Switch 4400.0.0 SE
References:
- 3Com: 3Com Product Downloads
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
