Default community names of the SNMP Agent

Family

SNMP

Nessus Plugin ID

10264

Bugtraq ID

11237
10576
177
2112
6825
7081
7212
7317
9681
986

CVE ID

CVE-1999-0517
CVE-1999-0186
CVE-1999-0254
CVE-1999-0516

 

Description:


Synopsis :

The community name of the remote SNMP server can be guessed.

Description :

It is possible to obtain the default community names of the remote
SNMP server.

An attacker may use this information to gain more knowledge about
the remote host, or to change the configuration of the remote
system (if the default community allow such modifications).

Solution :

Disable the SNMP service on the remote host if you do not use it,
filter incoming UDP packets going to this port, or change the
default community string.

Risk factor :

High