## SNMP Vulnerability

### Risk Factor: 2

### Machines Affected:

Machines running SNMP without acess restrictions, authentication, or privacy enabled (NOTE: SNMPv2 is the only version that has these features, therefore SNMP and SNMPv1 are both vulnerable)

### Description:

One can use SNMP to gain information on a host when SNMP uses default community words (such as "private," "public," etc.).

### Consequences:

Informationa can be gained on a host that may be useful to a breakin attempt.

### Fix:

Run SNMPv2 with all of the security features enabled, or do not run it at all.

NOTE: Some implementations of SNMP (proprietary implementations) may already have their own access controls and authorization built in.

Links for advisories/more info

A paper on SNMP security considerations
RFC 1157