Ensure SNMP is disabled or not installed on all remote access endpoints.

Part of SRC-EPT-350 SNMP disabled on remote endpoints

Associated with IA controls: ECSC-1

SV-20954r1_rule Ensure SNMP is disabled or not installed on all remote access endpoints.

Vulnerability discussion

There are many known vulnerabilities in the SNMP protocol and if the default community strings and passwords are not modified, an unauthorized individual could gain control of the endpoint. This could lead to a denial of service or the compromise of sensitive data. Since this protocol is blocked at the router, it should not be installed or enabled on remote systems.

Check content

Navigate to the Services applet in the Administrative Tools folder. Check the services listing to see if SNMP is installed and enabled. If SNMP service is installed, this is a finding.

Fix text

Ensure SNMP is not enabled.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.