Code: p557 Severity: Warning
Description: This event is generated when SNMP communications contain a NULL value the authentication string. Impact: Medium to Serious. Depending on if the community string was for read-only, read-create or read-write an attacker could gain a varying level of access to a system. Corrective: Make sure that all devices that have SNMP turned on have complex passwords assigned. Disable unneeded WRITE / CREATE community strings. Since SNMP traffic is not encrypted, use a packet filtering firewall to restrict SNMP communications to the protected network.
|
