Crosscom/Olicom XLT-F running XL 80 IM Version 5.5 Build Level 2 allows a remote attacker SNMP read and write access via a default, undocumented community string 'ILMI'.
Fix
Public exploits 1
- Olicom XLT-F XL 80 IM V5.5BL2 - Undocumented Community String (remote · hardware) Exploit-DB · verified · 2001-03-25
Each line links to the index that lists it, never to exploit code. Exploit-DB's "verified" and a Metasploit rank of good or better count as verified; a PoC-in-GitHub entry is a repository's claim.
Patch, vendor advisory and mitigation references on NVD 2
- http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 6.4 · crosscom_olicomNVD modified 2026-10-09 20:17
Affected (CPE criteria) 1
cpe:2.3:h:crosscom_olicom:xlt-f:*:*:*:*:*:*:*:*
References 4
- http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5718
- http://archives.neohapsis.com/archives/bugtraq/2001-03/0364.html Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5718