LiveActive security incident?Get immediate response
CVE Record

CVE-2002-0012: Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of servi...

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one or more for each vendor. This and other SNMP-related candidates will be updated when more accurate information is available.

UnknownCVSS not scoredNot KEV-listedUpdated
Discuss exposureBack to CVEs
Glexia's Takeunknown

Analyst readout for executives and security teams

Plain-English summary

This CVE covers a broad class of SNMPv1 implementation flaws. A remote attacker could crash affected systems or, in some cases, gain privileges through SNMPv1 trap handling. The record does not name specific affected products and warns the issue may be split by vendor.

Executive priority

Treat this as a legacy infrastructure risk requiring inventory-driven review. Business urgency is higher where SNMPv1 is reachable across untrusted networks or runs on critical systems.

Technical view

The issue is tied to SNMPv1 trap handling and was demonstrated by the PROTOS c06-SNMPv1 test suite. The CVE record describes denial-of-service and possible privilege-gain outcomes across many implementations, but provides no CVSS, CWE, or definitive affected product list.

Likely exposure

Exposure depends on legacy systems or network devices running affected SNMPv1 implementations. The bundle lists vendor advisories from Microsoft, Red Hat, HP, and SGI, but the CVE affected field is non-specific.

Exploitation context

CISA KEV status is false in the bundle. The references include PROTOS SNMPv1 testing material and an ISS advisory about a remote SNMP attack tool, but the bundle does not establish active exploitation.

Researcher notes

The CVE is intentionally broad and notes likely future splitting by vendor. Avoid overclaiming product scope. Validation should focus on vendor advisory correlation, SNMPv1 exposure, and whether affected trap-handling code exists.

Mitigation direction

  • Review the relevant vendor advisory for each SNMP-enabled platform.
  • Apply vendor patches or configuration guidance where available.
  • Identify and reduce unnecessary SNMPv1 exposure.
  • Restrict SNMP access to trusted management networks.
  • Monitor SNMP services for crashes or abnormal trap handling.

Validation and detection

  • Inventory systems and appliances using SNMPv1.
  • Map each SNMP implementation to the listed vendor advisories.
  • Confirm vendor patch or configuration status for each asset.
  • Check network controls limiting SNMP reachability.
  • Review logs for unexplained SNMP-related service failures.
Prepared
Confidence
medium
Sources
8

Public sources used

Based on public source material and reviewed before publication.

Potential ATT&CK relevance

Conservative CVE-to-ATT&CK context

These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.

ATT&CK lookup starting points

Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.

cve · low confidence lookup

CVE-2002-0012 mapping review

Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.

Open ATT&CK lookup
Vulnerability profileCVE Program record
Severity
Unknown
CVSS
Not scored
Known Exploited
No
Published
Official CVE source material

CNA and ADP enrichment extracted from CVE v5

These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.

0CVSS vectors
0Timeline events
0ADP providers
14Source links

CVSS and timeline data

No CVSS vectors or timeline events were available in the normalized CVE source material.

Source materials

Affected products

Products and packages named in the record

VendorProductVersion / packageStatus
n/an/an/aListed
Weakness

CWE details

No CWE listed

CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.