Skip to content
Fencer Vulns
high 7.8

CVE-2020-15862 json

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary co…

published 2020-08-19 6 y ago modified 2026-06-17 4 mo ago also EUVD-2020-7843

cvss
7.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.4%
EPSS 0.4% chance of exploitation in 30 days, percentile 32%
public exploits
0
none known

Summary

Net-SNMP through 5.8 has Improper Privilege Management because SNMP WRITE access to the EXTEND MIB provides the ability to run arbitrary commands as root.

Patch / fix

  • net-snmp net-snmp 5.8.1
  • net-snmp Debian 14, Debian 13, Debian 12 5.8+dfsg-4

debian advisories DEBIAN-CVE-2020-15862

  • net-snmp Ubuntu 16.04 LTS 5.7.3+dfsg-1ubuntu4.6
  • net-snmp Ubuntu 18.04 LTS 5.7.3+dfsg-1.8ubuntu3.6
  • net-snmp Ubuntu 20.04 LTS 5.8+dfsg-2ubuntu2.3
  • net-snmp Ubuntu Pro 14.04 LTS 5.7.2~dfsg-8.1ubuntu3.3+esm2

ubuntu advisories UBUNTU-CVE-2020-15862

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • net-snmp RHEL 8 1:5.8-18.el8_3.1
  • net-snmp-libs RHEL 8 1:5.8-18.el8_3.1
  • net-snmp-perl RHEL 8 1:5.8-18.el8_3.1
  • net-snmp-utils RHEL 8 1:5.8-18.el8_3.1
  • net-snmp-agent-libs RHEL 8 1:5.8-18.el8_3.1
  • net-snmp RHEL 7 1:5.7.2-49.el7_9.1
  • net-snmp-gui RHEL 7 1:5.7.2-49.el7_9.1
  • net-snmp-libs RHEL 7 1:5.7.2-49.el7_9.1

red hat advisories RHSA-2021:0525RHSA-2021:0358RHSA-2021:0257RHSA-2020:5480RHSA-2020:5420RHSA-2020:5372

  • net-snmp SLES 15 SP2-BCL, SLES 15 SP1-BCL, SLE Real Time 15 SP2 +15 more 5.7.3-10.9.1
  • net-snmp SLES for SAP 12 SP5, SLES for SAP 12 SP4, SLES for SAP 12 SP3 +11 more 5.7.3-6.9.1
  • net-snmp SLES for SAP 15, SLES 15-LTSS, SLE High Performance Computing 15-LTSS +1 more 5.7.3-7.13.1

suse advisories SUSE-SU-2022:0050-2SUSE-SU-2022:0050-1SUSE-SU-2022:0030-1SUSE-SU-2021:4191-1

  • net-snmp openSUSE Leap 15.3 5.7.3-10.9.1
  • opera openSUSE Leap 15.3 NonFree 84.0.4316.14-lp153.2.36.1

opensuse advisories openSUSE-SU-2022:0050-1

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2020-15862 updated cvss 8.8

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

  • Red Hat Enterprise Linux 5 net-snmp
    affected: no fix planned “Out of support scope”
  • Red Hat Enterprise Linux AppStream (v. 8) net-snmp 5.8-18.el8_3.1, net-snmp-perl 5.8-18.el8_3.1, net-snmp-utils 5.8-18.el8_3.1, net-snmp-agent-libs 5.8-18.el8_3.1
    fixed: vendor fix RHSA-2020:5480
  • Red Hat Enterprise Linux AppStream E4S (v. 8.0) net-snmp 5.8-7.el8_0.4, net-snmp-utils 5.8-7.el8_0.4, net-snmp-agent-libs 5.8-7.el8_0.4
    fixed: vendor fix RHSA-2020:5201
  • Red Hat Enterprise Linux AppStream EUS (v. 8.1) net-snmp 5.8-12.el8_1.3, net-snmp-utils 5.8-12.el8_1.3, net-snmp-agent-libs 5.8-12.el8_1.3
    fixed: vendor fix RHSA-2020:5372
  • Red Hat Enterprise Linux AppStream EUS (v. 8.2) net-snmp 5.8-14.el8_2.3, net-snmp-utils 5.8-14.el8_2.3, net-snmp-agent-libs 5.8-14.el8_2.3
    fixed: vendor fix RHSA-2020:5420
  • Red Hat Enterprise Linux BaseOS (v. 8) net-snmp 5.8-18.el8_3.1, net-snmp-libs 5.8-18.el8_3.1
    fixed: vendor fix RHSA-2020:5480
  • Red Hat Enterprise Linux BaseOS E4S (v. 8.0) net-snmp 5.8-7.el8_0.4, net-snmp-libs 5.8-7.el8_0.4
    fixed: vendor fix RHSA-2020:5201
  • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) net-snmp 5.8-12.el8_1.3, net-snmp-libs 5.8-12.el8_1.3
    fixed: vendor fix RHSA-2020:5372
show 21 more
  • Red Hat Enterprise Linux BaseOS EUS (v. 8.2) net-snmp 5.8-14.el8_2.3, net-snmp-libs 5.8-14.el8_2.3
    fixed: vendor fix RHSA-2020:5420
  • Red Hat Enterprise Linux Client (v. 7) net-snmp 5.7.2-49.el7_9.1, net-snmp-libs 5.7.2-49.el7_9.1, net-snmp-utils 5.7.2-49.el7_9.1, net-snmp-agent-libs 5.7.2-49.el7_9.1 Red Hat Enterprise Linux Client Optional (v. 7) net-snmp-gui 5.7.2-49.el7_9.1, net-snmp-perl 5.7.2-49.el7_9.1, net-snmp-python 5.7.2-49.el7_9.1, net-snmp-sysvinit 5.7.2-49.el7_9.1
    fixed: vendor fix RHSA-2020:5350
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) net-snmp 5.7.2-38.el7_6.3, net-snmp-libs 5.7.2-38.el7_6.3, net-snmp-utils 5.7.2-38.el7_6.3, net-snmp-agent-libs 5.7.2-38.el7_6.3
    fixed: vendor fix RHSA-2021:0358
  • Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) net-snmp 5.7.2-43.el7_7.7, net-snmp-libs 5.7.2-43.el7_7.7, net-snmp-utils 5.7.2-43.el7_7.7, net-snmp-agent-libs 5.7.2-43.el7_7.7
    fixed: vendor fix RHSA-2021:0525
  • Red Hat Enterprise Linux ComputeNode Optional (v. 7) net-snmp-gui 5.7.2-49.el7_9.1, net-snmp-perl 5.7.2-49.el7_9.1, net-snmp-python 5.7.2-49.el7_9.1, net-snmp-sysvinit 5.7.2-49.el7_9.1
    fixed: vendor fix RHSA-2020:5350
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) net-snmp-gui 5.7.2-38.el7_6.3, net-snmp-perl 5.7.2-38.el7_6.3, net-snmp-python 5.7.2-38.el7_6.3, net-snmp-sysvinit 5.7.2-38.el7_6.3
    fixed: vendor fix RHSA-2021:0358
  • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) net-snmp-gui 5.7.2-43.el7_7.7, net-snmp-perl 5.7.2-43.el7_7.7, net-snmp-python 5.7.2-43.el7_7.7, net-snmp-sysvinit 5.7.2-43.el7_7.7
    fixed: vendor fix RHSA-2021:0525
  • Red Hat Enterprise Linux Desktop (v. 6) net-snmp 5.5-60.el6_10.2, net-snmp-libs 5.5-60.el6_10.2 Red Hat Enterprise Linux Desktop Optional (v. 6) net-snmp-perl 5.5-60.el6_10.2, net-snmp-utils 5.5-60.el6_10.2, net-snmp-python 5.5-60.el6_10.2
    fixed: vendor fix RHSA-2020:5129
  • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) net-snmp 5.7.2-38.el7_6.3, net-snmp-libs 5.7.2-38.el7_6.3, net-snmp-utils 5.7.2-38.el7_6.3, net-snmp-agent-libs 5.7.2-38.el7_6.3 Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) net-snmp-gui 5.7.2-38.el7_6.3, net-snmp-perl 5.7.2-38.el7_6.3, net-snmp-python 5.7.2-38.el7_6.3, net-snmp-sysvinit 5.7.2-38.el7_6.3
    fixed: vendor fix RHSA-2021:0358
  • Red Hat Enterprise Linux HPC Node (v. 6) net-snmp 5.5-60.el6_10.2, net-snmp-libs 5.5-60.el6_10.2, net-snmp-perl 5.5-60.el6_10.2, net-snmp-utils 5.5-60.el6_10.2, net-snmp-python 5.5-60.el6_10.2 Red Hat Enterprise Linux HPC Node Optional (v. 6) net-snmp-devel 5.5-60.el6_10.2, net-snmp-debuginfo 5.5-60.el6_10.2 Red Hat Enterprise Linux Server (v. 6) net-snmp 5.5-60.el6_10.2, net-snmp-libs 5.5-60.el6_10.2, net-snmp-perl 5.5-60.el6_10.2, net-snmp-utils 5.5-60.el6_10.2, net-snmp-python 5.5-60.el6_10.2
    fixed: vendor fix RHSA-2020:5129
  • Red Hat Enterprise Linux Server (v. 7) net-snmp 5.7.2-49.el7_9.1, net-snmp-libs 5.7.2-49.el7_9.1, net-snmp-utils 5.7.2-49.el7_9.1, net-snmp-agent-libs 5.7.2-49.el7_9.1
    fixed: vendor fix RHSA-2020:5350
  • Red Hat Enterprise Linux Server AUS (v. 7.4) net-snmp 5.7.2-28.el7_4.4, net-snmp-libs 5.7.2-28.el7_4.4, net-snmp-utils 5.7.2-28.el7_4.4, net-snmp-agent-libs 5.7.2-28.el7_4.4 Red Hat Enterprise Linux Server E4S (v. 7.4) net-snmp 5.7.2-28.el7_4.4, net-snmp-libs 5.7.2-28.el7_4.4, net-snmp-utils 5.7.2-28.el7_4.4, net-snmp-agent-libs 5.7.2-28.el7_4.4
    fixed: vendor fix RHSA-2021:0257
  • Red Hat Enterprise Linux Server EUS (v. 7.6) net-snmp 5.7.2-38.el7_6.3, net-snmp-libs 5.7.2-38.el7_6.3, net-snmp-utils 5.7.2-38.el7_6.3, net-snmp-agent-libs 5.7.2-38.el7_6.3
    fixed: vendor fix RHSA-2021:0358
  • Red Hat Enterprise Linux Server EUS (v. 7.7) net-snmp 5.7.2-43.el7_7.7, net-snmp-libs 5.7.2-43.el7_7.7, net-snmp-utils 5.7.2-43.el7_7.7, net-snmp-agent-libs 5.7.2-43.el7_7.7
    fixed: vendor fix RHSA-2021:0525
  • Red Hat Enterprise Linux Server Optional (v. 7) net-snmp-gui 5.7.2-49.el7_9.1, net-snmp-perl 5.7.2-49.el7_9.1, net-snmp-python 5.7.2-49.el7_9.1, net-snmp-sysvinit 5.7.2-49.el7_9.1
    fixed: vendor fix RHSA-2020:5350
  • Red Hat Enterprise Linux Server Optional AUS (v. 7.4) net-snmp-gui 5.7.2-28.el7_4.4, net-snmp-perl 5.7.2-28.el7_4.4, net-snmp-python 5.7.2-28.el7_4.4, net-snmp-sysvinit 5.7.2-28.el7_4.4 Red Hat Enterprise Linux Server Optional E4S (v. 7.4) net-snmp-gui 5.7.2-28.el7_4.4, net-snmp-perl 5.7.2-28.el7_4.4, net-snmp-python 5.7.2-28.el7_4.4, net-snmp-sysvinit 5.7.2-28.el7_4.4
    fixed: vendor fix RHSA-2021:0257
  • Red Hat Enterprise Linux Server Optional EUS (v. 7.6) net-snmp-gui 5.7.2-38.el7_6.3, net-snmp-perl 5.7.2-38.el7_6.3, net-snmp-python 5.7.2-38.el7_6.3, net-snmp-sysvinit 5.7.2-38.el7_6.3
    fixed: vendor fix RHSA-2021:0358
  • Red Hat Enterprise Linux Server Optional EUS (v. 7.7) net-snmp-gui 5.7.2-43.el7_7.7, net-snmp-perl 5.7.2-43.el7_7.7, net-snmp-python 5.7.2-43.el7_7.7, net-snmp-sysvinit 5.7.2-43.el7_7.7
    fixed: vendor fix RHSA-2021:0525
  • Red Hat Enterprise Linux Server Optional TUS (v. 7.4) net-snmp-gui 5.7.2-28.el7_4.4, net-snmp-perl 5.7.2-28.el7_4.4, net-snmp-python 5.7.2-28.el7_4.4, net-snmp-sysvinit 5.7.2-28.el7_4.4 Red Hat Enterprise Linux Server TUS (v. 7.4) net-snmp 5.7.2-28.el7_4.4, net-snmp-libs 5.7.2-28.el7_4.4, net-snmp-utils 5.7.2-28.el7_4.4, net-snmp-agent-libs 5.7.2-28.el7_4.4
    fixed: vendor fix RHSA-2021:0257
  • Red Hat Enterprise Linux Workstation (v. 6) net-snmp 5.5-60.el6_10.2, net-snmp-libs 5.5-60.el6_10.2, net-snmp-perl 5.5-60.el6_10.2, net-snmp-utils 5.5-60.el6_10.2, net-snmp-python 5.5-60.el6_10.2
    fixed: vendor fix RHSA-2020:5129
  • Red Hat Enterprise Linux Workstation (v. 7) net-snmp 5.7.2-49.el7_9.1, net-snmp-libs 5.7.2-49.el7_9.1, net-snmp-utils 5.7.2-49.el7_9.1, net-snmp-agent-libs 5.7.2-49.el7_9.1 Red Hat Enterprise Linux Workstation Optional (v. 7) net-snmp-gui 5.7.2-49.el7_9.1, net-snmp-perl 5.7.2-49.el7_9.1, net-snmp-python 5.7.2-49.el7_9.1, net-snmp-sysvinit 5.7.2-49.el7_9.1
    fixed: vendor fix RHSA-2020:5350

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Exploit prediction

0.38% chance of exploitation in the next 30 days, higher than 32% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by version score vector
NVD 3.1 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVD 2.0 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C

Classification

Weakness
  • CWE-269 Improper Privilege Management

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.