CVE-2026-33367

HIGHCVSS 8.1

Description

SNMP can be used to perform administrative actions such as retrieving configuration files, modifying user accounts or device settings, and initiating firmware or bootloader upgrades or downgrades—all without any authentication.

Timeline

Published:October 9th, 2026 3:17 PM

Last modified:October 11th, 2026 5:17 PM

CVSS Scoring

CVSS v3: 8.1 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weaknesses (CWE)

CWE-306

References & Reports

Advisories, patches, and third-party reports

https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-281-01.json
https://www.cisa.gov/news-events/ics-advisories/icsa-26-281-01
https://www.hms-networks.com/
https://www.hms-networks.com/cybersecurity

Source: NIST NVD · Data may lag official sources by up to one minute