Detections
Analytics

Multiple Vendor SNMP public Community String Information Disclosure

medium Nessus Plugin ID 74091

Language:

Synopsis

The remote hosts leaks sensitive information when sending SNMP requests using the 'public' SNMP community string.

Description

Nessus was able to enumerate sensitive information on the remote device by sending SNMP requests using 'public' as the SNMP community string.

Solution

Reconfigure or restrict access to the SNMP server.

Plugin Details

Severity: Medium

ID: 74091

File Name: snmp_info_disclosure.nasl

Version: Revision: 1.2

Type: remote

Family: SNMP

Published: 5/19/2014

Updated: 9/24/2015

Supported Sensors: Nessus

Vulnerability Information

Required KB Items: SNMP/sysDesc

Exploited by Nessus: true

Vulnerability Publication Date: 5/16/2014