What is CVE-2016-2509?

CVE-2016-2509 is a medium-severity vulnerability in Belden Hirschmann Firmware, classified under Information Disclosure. CVSS score: 5.3/10. Published 2016-02-18.

How severe is CVE-2016-2509?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Belden Hirschmann Firmware

CVE-2016-2509

The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets an SNMP community to the same string as the administrator password, which allows remote attackers to obtain sensitive information by sniffing the network.

Vulnerability class: Information Disclosure

Published 2016-02-18 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N.

EPSS exploit prediction

EPSS: 0.008 (54.7th percentile), scored 2026-09-29.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 55th percentile — 54.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.008 · newest: 0.008 · change: 0.000

Affected products

Belden Hirschmann Firmware — versions 05.3.06
Belden Hirschmann L2b
Belden Hirschmann L2e
Belden Hirschmann L2p
Belden Hirschmann L3e
Belden Hirschmann L3p

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

www.kb.cert.org/vuls/id/507216 (US Government Resource, Third Party Advisory, third-party-advisory)
www.belden.com/resourcecenter/security/upload/Belden_Security_Advisory_BSECV-20… (Vendor Advisory)

Frequently asked questions

What is CVE-2016-2509?: CVE-2016-2509 is a medium-severity vulnerability in Belden Hirschmann Firmware, classified under Information Disclosure. CVSS score: 5.3/10. Published 2016-02-18.
How severe is CVE-2016-2509?: Medium severity. CVSS v3 base score is 5.3 out of 10.