CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network.

• CWE-200

• http://www.kb.cert.org/vuls/id/507216Third Party Advisory, US Government Resource
• https://www.belden.com/resourcecenter/security/upload/Belden_Security_Advisory_BSECV-2016-2_1v0.pdfVendor Advisory
• http://www.kb.cert.org/vuls/id/507216Third Party Advisory, US Government Resource
• https://www.belden.com/resourcecenter/security/upload/Belden_Security_Advisory_BSECV-2016-2_1v0.pdfVendor Advisory

Published

Feb 18, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2503The Qualcomm GPU driver in Android before 2016-07-05 on Nexu…
• CVE-2016-2504The Qualcomm GPU driver in Android before 2016-08-05 on Nexu…
• CVE-2016-2505mpeg2ts/ATSParser.cpp in libstagefright in mediaserver in An…
• CVE-2016-2506DRMExtractor.cpp in libstagefright in mediaserver in Android…
• CVE-2016-2507Integer overflow in codecs/on2/h264dec/source/h264bsd_storag…
• CVE-2016-2508media/libmediaplayerservice/nuplayer/GenericSource.cpp in me…
• CVE-2016-2510BeanShell (bsh) before 2.0b6, when included on the classpath…8.1
• CVE-2016-2511Cross-site scripting (XSS) vulnerability in WebSVN 2.3.3 and…
• CVE-2016-2512The utils.http.is_safe_url function in Django before 1.8.10 …
• CVE-2016-2513The password hasher in contrib/auth/hashers.py in Django bef…
• CVE-2016-2515Hawk before 3.1.3 and 4.x before 4.1.1 allow remote attacker…
• CVE-2016-2516NTP before 4.2.8p7 and 4.3.x before 4.3.92, when mode7 is en…