File tree 1 file changed +8
-2
lines changed
monkey/agent_plugins/exploiters/snmp
1 file changed +8
-2
lines changed Original file line number Diff line number Diff line change @@ -12,10 +12,16 @@ safe: true
12
12
remediation_suggestion : >-
13
13
Configure SNMP to use read-only communities.
14
14
15
+ Apply security updates to your Net-SNMP installation.
16
+
15
17
Limit access over SNMP to trusted hosts.
16
18
17
19
Use SNMPv3 with the authPriv security level if possible.
18
20
19
21
20
- The machine is vulnerable to an SNMP attack.
21
- An Infection Monkey Agent executed a command over SNMP using stolen/configured credentials.
22
+ The machine is vulnerable to an attack on Net-SNMP via
23
+ [CVE-2020-15862](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15862)
24
+ An Infection Monkey Agent executed a command over SNMP using
25
+ stolen/configured credentials or community strings. This attack was
26
+ possible because the version of Net-SNMP running on the server has not had
27
+ security patches applied.
You can’t perform that action at this time.
0 commit comments