OSVDB ID: 209 Title: SNMP Default public/private String Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
SNMP implementations of multiple vendors contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered due to default SNMP community names like 'public' or 'private', which will disclose sensitive information resulting in a loss of confidentiality. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Authentication Management, Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround: Disable or remove the SNMP Service if it is not required or take steps to secure the SNMP community names. |
Products |
|
References |
Credit |
Unknown or Incomplete |