TMA-CISCO-IOS-1.5.2
Unset 'private' for 'snmp-server community'
VisokaNivo 1Automatskacisco-ios
Opis
An SNMP community string permits read-only access to all objects. The default community string "private" is well known. Using easy to guess, well known community string poses a threat that an attacker can effortlessly gain unauthorized access to the device. Audited against the output of 'show running-config' (run 'terminal length 0' first; do not use 'show running-config all' or 'show startup-config').
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)(?i)^snmp-server community private(?:\s|$)
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
! Disable the default SNMP community string private no snmp-server community {private}
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- cisco-iosnetworksnmp
- Referenca
- CIS Cisco IOS XE 17.x Benchmark v2.2.1 - 1.5.2 Unset 'private' for 'snmp-server community'
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target cisco-ios