CVE-2008-0960: SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1...

Security readout for executives and security teams

This is an authentication bypass in SNMPv3 implementations used by multiple legacy network and management products. A remote attacker could be accepted as authenticated because the HMAC verification could be shortened. The main business risk is unauthorized management access to devices that expose affected SNMPv3 services. Likely exposure is legacy or embedded infrastructure still running affected SNMPv3 stacks, especially network appliances, storage, firewalls, and management agents. Modern patched systems are less likely exposed, but old appliances may persist unnoticed. Treat as a high-priority legacy infrastructure risk. Prioritize externally reachable or broadly accessible management interfaces, then appliances that cannot be easily patched. Mitigation focus: Upgrade Net-SNMP to the fixed branch versions or later maintained releases.; Check listed vendors' advisories for product-specific fixed versions or mitigations.; Restrict SNMP access to trusted management networks only..

Prepared

Jun 28, 2026, 18:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.