Description

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is enabled. Attackers with local network access can sniff SNMP traffic or extract configuration data to recover plaintext credentials and gain unauthorized administrative access to the switches.

INFO

Published Date :

2026-04-03T21:59:07.731Z

Last Modified :

2026-04-07T14:17:23.799Z

Source :

VulnCheck
AFFECTED PRODUCTS

The following products are affected by CVE-2016-15058 vulnerability.

Vendors Products
Belden
  • Hirschmann Hilcos Classic Platform
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2016-15058.

URL Resource
https://assets.belden.com/m/1d8273c6205dc400/original/Security-Bulletin-Password-Sync-SNMP-v1-v2-BSECV-2016-12.pdf cve-icon cve-icon
https://www.kb.cert.org/vuls/id/507216 cve-icon cve-icon
https://www.vulncheck.com/advisories/hirschmann-hilcos-classic-platform-password-exposure-via-snmp cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact