topic Re: SNMP Agent Default Community Name (public) in Advanced Threat Prevention Discussions

SNMP Agent Default Community Name (public)

Sefekme_Serge — Fri, 03 May 2024 15:38:24 GMT

The community name of the remote SNMP server can be guessed.

It is possible to obtain the default community name of the remote SNMP server.

An attacker may use this information to gain more knowledge about the remote host, or to change the configuration of the remote system (if the default community allows such modifications).

Plugin Output:
The remote SNMP server replies to the following default community
string :
public

Re: SNMP Agent Default Community Name (public)

Claw4609 — Fri, 03 May 2024 16:14:57 GMT

Hello,

Are you receiving this from a vulnerability scan? The default SNMP string is "public" and its recommended to change it, preferably setting up SNMPv3.

Configuring SNMPv2: How to Configure SNMPv2 on the Palo Alto Networks Firewall - Knowledge Base - Palo Alto Networks

Configuring SNMPv3: HOW TO CONFIGURE SNMPV3 ON THE PALO ALTO NETWORKS FIREWALL - Knowledge Base - Palo Alto Networks