Exposure of SNMP Credentials in Genucenter Web Interface

Executive Summary

The vulnerability CVE-2026-13211 affects the genucenter web interface before version 8.0p11. It causes sensitive SNMP authentication and encryption keys to be unnecessarily exposed in HTTP responses to users with the "Service" or "Admin" roles.

These keys are embedded in the HTML source code of the web interface responses, making them easily extractable using browser tools or automated scripts.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to unauthorized access to network devices because attackers or unauthorized users with access to the web interface can obtain sensitive SNMP credentials.

Compromise of these keys can weaken network security by allowing attackers to intercept or manipulate network management traffic.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability can be detected by inspecting the HTTP responses from the genucenter web interface for the presence of sensitive SNMP authentication and encryption keys.

Since the keys are embedded in the HTML source code of responses to users with "Service" or "Admin" roles, you can use browser developer tools or automated scripts to extract and verify if these keys are exposed.

A practical approach is to perform an HTTP request to the genucenter web interface while authenticated as a user with "Service" or "Admin" roles and then search the response body for SNMP keys.

Example commands might include using curl or wget to fetch the page and grep or similar tools to search for SNMP keys in the response, for instance:

• curl -k -u ServiceUser:password https://<genucenter-ip>/path/to/interface | grep -i snmp
• Or using browser developer tools to inspect the HTML source code of the web interface pages after logging in as a Service or Admin user.

Useful 0 Not Useful 0

Mitigation Strategies

The immediate mitigation step is to upgrade the genucenter web interface to version 8.0 Patch 11 or later, as the vendor genua has released this patch to fix the vulnerability.

Versions 8.6 or later are already unaffected by this issue.

Until the upgrade can be performed, restrict access to the genucenter web interface to trusted users only, especially limiting users with "Service" or "Admin" roles, to reduce the risk of exposure.

Useful 0 Not Useful 0