CVE-2026-13211

The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the “Service” or “Admin” role.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/sbaresearch/advisories/tree/public/2026/SBA-ADV-20260424-01_Genucenter_Disclosure_of_SNMP_Credentials
https://github.com/sbaresearch/advisories/tree/public/2026/SBA-ADV-20260424-01_Genucenter_Disclosure_of_SNMP_Credentials

Configurations

No configuration.

History

25 Oct 2026, 17:10

Type	Values Removed	Values Added
Summary		(es) La interfaz web de genucenter anterior a la versión 8.0p11 expone innecesariamente claves sensibles de autenticación y cifrado SNMP en sus respuestas HTTP a usuarios con el rol de ’Service’ o ’Admin’.

Information

Published : 2026-07-01 17:16

Updated : 2026-10-25 17:10

NVD link : CVE-2026-13211

Mitre link : CVE-2026-13211

CVE.ORG link : CVE-2026-13211

JSON object : View

Products Affected

No product.

CWE

CWE-201

Insertion of Sensitive Information Into Sent Data

{"id": "CVE-2026-13211", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-13211", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-01T17:47:05.251461Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a", "affectedData": [{"vendor": "genua", "product": "genucenter", "versions": [{"status": "affected", "version": "8.0", "versionType": "custom", "lessThanOrEqual": "8.0p10"}, {"status": "unaffected", "version": "8.0p11", "lessThan": "8.1", "versionType": "custom"}, {"status": "unaffected", "version": "8.6", "versionType": "custom"}], "defaultStatus": "unknown"}]}], "published": "2026-07-01T17:16:19.740", "references": [{"url": "https://github.com/sbaresearch/advisories/tree/public/2026/SBA-ADV-20260424-01_Genucenter_Disclosure_of_SNMP_Credentials", "source": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a"}, {"url": "https://github.com/sbaresearch/advisories/tree/public/2026/SBA-ADV-20260424-01_Genucenter_Disclosure_of_SNMP_Credentials", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a", "description": [{"lang": "en", "value": "CWE-201"}]}], "descriptions": [{"lang": "en", "value": "The genucenter web interface before version 8.0p11 unnecessarily exposes sensitive SNMP authentication and encryption keys in its HTTP responses to users with the \u201cService\u201d or \u201cAdmin\u201d role."}, {"lang": "es", "value": "La interfaz web de genucenter anterior a la versi\u00f3n 8.0p11 expone innecesariamente claves sensibles de autenticaci\u00f3n y cifrado SNMP en sus respuestas HTTP a usuarios con el rol de \u2019Service\u2019 o \u2019Admin\u2019."}], "lastModified": "2026-10-25T17:10:00.197", "sourceIdentifier": "1e3a9e0f-5156-4bf8-b8a3-cc311bfc0f4a"}