Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Net Snmp

First CVE: Oct 11, 2002Active for: 24 yearsTotal CVEs: 72

Net-SNMP is a widely embedded open-source implementation of the Simple Network Management Protocol that provides network monitoring, device management, and trap-handling capabilities across a vast range of deployed systems and appliances despite maintaining a singular product focus. The vendor's vulnerability footprint is modest in volume yet represents a significant risk multiplier because a single flaw in the protocol parser or agent logic can propagate to every downstream system and embedded derivative that incorporates the library. The exposure reflects the parsing complexity inherent to SNMP message handling and the agent's privileged role in network and systems infrastructure, where vulnerabilities can enable unauthorized data access or device compromise. Defenders should treat Net-SNMP updates as broadly applicable to their network device inventory and embedded systems rather than tracking discrete products alone, since remediation typically depends on downstream vendors updating their bundled or forked versions. Current exploitation activity and exposure counts are shown alongside this summary.

FAUCET AI Generated
36
Total CVEs
More Total CVEs than 98% of tracked vendors
2.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 90% of tracked vendors
6.6
Avg CVSS Score
Higher Avg CVSS Score than 43% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Net Snmp over time

Volume of CVEsAvg CVSS Base Score
First CVE
Oct 11, 2002
23 years ago
Most Recent CVE
Dec 23, 2025
213 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (36 CVEs).

36 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2008-0960HIGH
SNMPv3 HMAC verification in (1) Net-SNMP 5.2.x before 5.2.4.1, 5.3.x before 5.3.2.1, and 5.4.x before 5.4.1.1; (2) UCD-SNMP; (3) eCos; (4) Juniper Session and Resource Control (SRC
Jun 10, 200810.077NOYES
CVE-2025-68615CRITICAL
net-snmp is a SNMP application library, tools and daemon. Prior to versions 5.9.5 and 5.10.pre2, a specially crafted packet to an net-snmp snmptrapd daemon can cause a buffer overf
Dec 23, 20259.862NONO
CVE-2022-44793MEDIUM
handle_ipv6IpForwarding in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.4.3 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker to cause the in
Nov 7, 20226.551NONO
CVE-2022-44792MEDIUM
handle_ipDefaultTTL in agent/mibgroup/ip-mib/ip_scalars.c in Net-SNMP 5.8 through 5.9.3 has a NULL Pointer Exception bug that can be used by a remote attacker (who has write access
Nov 7, 20226.550NONO
CVE-2015-5621HIGH
The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item when parsing of the SNMP PDU fails, whi
Aug 19, 20157.550NOYES
CVE-2018-18065MEDIUM
_set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to
Oct 8, 20186.541NOYES
CVE-2018-1000116CRITICAL
NET-SNMP version 5.7.2 contains a heap corruption vulnerability in the UDP protocol handler that can result in command execution.
Mar 7, 20189.834NONO
CVE-2007-5846HIGH
The SNMP agent (snmp_agent.c) in net-snmp before 5.4.1 allows remote attackers to cause a denial of service (CPU and memory consumption) via a GETBULK request with a large max-repe
Nov 6, 20077.833NONO
CVE-2008-2292MEDIUM
Buffer overflow in the __snprint_value function in snmp_get in Net-SNMP 5.1.4, 5.2.4, and 5.4.1, as used in SNMP.xs for Perl, allows remote attackers to cause a denial of service (
May 18, 20086.830NOYES
CVE-2005-4837HIGH
snmp_api.c in snmpd in Net-SNMP 5.2.x before 5.2.2, 5.1.x before 5.1.3, and 5.0.x before 5.0.10.2, when running in master agentx mode, allows remote attackers to cause a denial of
Dec 31, 200510.030NONO
View all 36 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products36 CVEs
56%
33%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local2 (5.6%)
Network15 (41.7%)
Unknown19 (52.8%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low16 (44.4%)
High1 (2.8%)
Unknown19 (52.8%)
User Interaction
None15 (41.7%)
Unknown19 (52.8%)
Required2 (5.6%)
Privileges Required
Low10 (27.8%)
High0 (0.0%)
None7 (19.4%)
Unknown19 (52.8%)

Exploit Exposure

Signals from CVEs in this vendor scope (36 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
5 CVEs
13.9% of CVEs· 77th percentile

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Net Snmp.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Net Snmp — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Net Snmp's Products

View all 4 CNAs →

Top CWEs