CVE-2016-15058 in Hirschmann HiLCOS Classic Platform
Summary
Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is enabled. Attackers with local network access can sniff SNMP traffic or extract configuration data to recover plaintext credentials and gain unauthorized administrative access to the switches.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Responsible
VulnCheck
Reservation
04/03/2026
Disclosure
04/04/2026
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 355275 | Belden Hirschmann HiLCOS Classic Platform SNMP password recoverable | 257 | Not defined | Official fix | CVE-2016-15058 |