SNMP agents reveal information about network interfaces

Risk Level: Low risk vulnerability  Low

Check or Attack Name: SNMPShowInterface

Platforms: SNMP
Description:

All SNMP agents support the standard MIB-II ifTable. This table contains the IP address and network mask of each interface that the machine supports. This information may be used to learn more about the connections to and from the networked device.

Remedy:

Set the community string to a value that is not easily guessed. Use uppercase, lowercase, and numeric characters. If the agent supports View Access Control, limit the views that the agent may reveal.

References:

Cisco Systems Product Overview, Simple Network Management Protocol (SNMP), http://www.cisco.com/warp/public/535/3.html


X-Force Logo
Know Your Risks