Information Leakage / SNMP Agent Default Community Name (Public)

Description

SNMP Agent Default Community Name (public) is an Information Leakage vulnerability that occurs in Infrastructure. The vulnerability is caused when a system has the default community name set to public which results in the leakage of sensitive information.

Risk

The risk associated with this vulnerability is high as it can lead to an attacker obtaining sensitive data. An attacker can use this vulnerability to gain unauthorized access to a system, modify configurations, and even launch malicious attacks.

Solution

The best way to solve this vulnerability is to make sure that the SNMP Agent Default Community Name is changed to something other than public. This should be done on all systems that use the SNMP protocol. Additionally, the SNMP protocol should be disabled on systems where it is not needed.