net-snmp net-snmp

Name: net-snmp net-snmp
Brand: net-snmp

productUS

cpe:2.3:a:net-snmp:net-snmp:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical10high21medium2low

updated 2026-10-28

vulnerabilities (35)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-5621US	high7.5	38.3% (99th)	Exploit	no fix	2015-08-19	≤ 5.7.2
CVE-2018-18065US	medium6.5	17.5% (97th)	Exploit	5.8	2018-10-08	< 5.8
CVE-2012-6151US	medium4.3	9.45% (95th)	Exploit	no fix	2013-12-13	20 versions
CVE-2008-2292US	medium6.8	8.44% (95th)	Exploit	no fix	2008-05-18	3 versions
CVE-2022-44793US	medium6.5	53.5% (99th)	—	no fix	2022-11-07	5.4.3 → 5.9.3
CVE-2022-44792US	medium6.5	52.1% (99th)	—	no fix	2022-11-07	5.8 → 5.9.3
CVE-2025-68615US	—	42.4% (99th)	—	5.9.5	2025-12-23	2 versions
CVE-2007-5846US	high7.8	29.2% (98th)	—	no fix	2007-11-06	≤ 5.4.1
CVE-2005-4837US	high10.0	9.74% (95th)	—	no fix	2005-12-31	11 versions
CVE-2005-1740US	high10.0	8.64% (95th)	—	no fix	2005-05-24	9 versions
CVE-2018-1000116US	critical9.8	6.29% (94th)	—	no fix	2018-03-07	= 5.7.2
CVE-2008-4309US	medium5.0	5.06% (92nd)	—	no fix	2008-10-31	3 versions
CVE-2014-3565US	medium5.0	4.44% (91st)	—	no fix	2014-10-07	19 versions
CVE-2014-2284US	medium5.0	3.98% (90th)	—	no fix	2014-03-24	12 versions
CVE-2005-2177US	medium5.0	3.93% (90th)	—	no fix	2005-07-11	14 versions
CVE-2018-18066US	high7.5	3.59% (89th)	—	5.8	2018-10-08	< 5.8
CVE-2014-2285US	medium4.3	3.30% (88th)	—	no fix	2014-04-27	≤ 5.7.3
CVE-2008-6123US	medium5.0OT elevated	2.90% (87th)	—	no fix	2009-02-12	5.0.9 → 5.4.2.1
CVE-2019-20892US	medium6.5	2.31% (83rd)	—	no fix	2020-06-25	≤ 5.8
CVE-2009-1887US	medium5.0	2.21% (83rd)	—	no fix	2009-06-26	= 5.0.9
CVE-2012-2141US	low3.5	2.17% (82nd)	—	no fix	2012-08-14	= 5.7.1
CVE-2006-6305US	high7.5	2.02% (81st)	—	no fix	2006-12-06	= 5.3
CVE-2014-2310US	medium5.0	1.99% (81st)	—	no fix	2014-04-17	≤ 5.4
CVE-2002-1170US	medium5.0	1.84% (79th)	—	no fix	2002-10-11	3 versions
CVE-2003-0935US	medium6.4	1.56% (75th)	—	no fix	2003-12-01	7 versions
CVE-2022-24805US	high8.8	1.30% (70th)	—	5.9.2	2024-04-16	< 5.9.2
CVE-2022-24810US	high8.8	1.15% (67th)	—	5.9.2	2024-04-16	< 5.9.2
CVE-2022-24808US	medium6.5	1.13% (66th)	—	5.9.2	2024-04-16	< 5.9.2
CVE-2022-24809US	medium6.5	1.10% (66th)	—	5.9.2	2024-04-16	< 5.9.2
CVE-2022-24806US	medium5.3	1.05% (64th)	—	5.9.2	2024-04-16	< 5.9.2
CVE-2022-24807US	medium6.5	1.01% (63rd)	—	5.9.2	2024-04-16	< 5.9.2
CVE-2015-8100US	low2.1	0.54% (45th)	—	no fix	2015-11-10	≤ 5.8
CVE-2020-15861US	high7.8	0.46% (39th)	—	no fix	2020-08-20	≤ 5.7.3
CVE-2020-15862US	high7.8	0.38% (32nd)	—	5.8.1	2020-08-20	< 5.8.1
CVE-2005-2811US	medium4.6	0.37% (31st)	—	no fix	2005-09-07	16 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-476NULL Pointer Dereference8 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer3 CVEs
CWE-399CWE-3993 CVEs
CWE-120Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-266Incorrect Privilege Assignment2 CVEs
CWE-284Improper Access Control2 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE35 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan