What’s Vulnerable › Vulnerabilities

CVE-2015-5677

• Severity: medium (CVSS 5.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2017-02-07 · updated 2026-06-17
• Weakness: CWE-200

Description

bsnmpd, as used in FreeBSD 9.3, 10.1, and 10.2, uses world-readable permissions on the snmpd.config file, which allows local users to obtain the secret key for USM authentication by reading the file.

Affected products

• FreeBSD: 9.3, 10.1, 10.2

References

• http://www.securitytracker.com/id/1034678
• https://pierrekim.github.io/blog/2016-01-15-cve-2015-5677-freebsd-bsnmpd.html
• https://www.freebsd.org/security/advisories/FreeBSD-SA-16:06.bsnmpd.asc
• http://www.securitytracker.com/id/1034678
• https://pierrekim.github.io/blog/2016-01-15-cve-2015-5677-freebsd-bsnmpd.html
• https://www.freebsd.org/security/advisories/FreeBSD-SA-16:06.bsnmpd.asc

Get alerted when CVE-2015-5677 or the next vulnerability affects your stack