SNMP Agent Default Community Name (public)

high Nessus Plugin ID 41028

Language:

Synopsis

The community name of the remote SNMP server can be guessed.

Description

It is possible to obtain the default community name of the remote SNMP server.

An attacker may use this information to gain more knowledge about the remote host, or to change the configuration of the remote system (if the default community allows such modifications).

Solution

Disable the SNMP service on the remote host if you do not use it.
Either filter incoming UDP packets going to this port, or change the default community string.

Plugin Details

Severity: High

ID: 41028

File Name: snmp_default_public_community.nasl

Version: 1.14

Type: remote

Family: SNMP

Published: 11/25/2002

Updated: 6/1/2022

Configuration: Enable thorough checks

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.2

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Information

Exploit Ease: No exploit is required

Vulnerability Publication Date: 11/17/1998

Reference Information

CVE: CVE-1999-0517

BID: 2112

Detections

Analytics