TMA-CISCO-IOSXR-1.5.2
Unset 'public' for 'snmp-server community'
VisokaNivo 1Automatskacisco-iosxr
Opis
An SNMP community string permits read-only access to all objects. The default community string "public" is well known. Using easy to guess, well known community string poses a threat that an attacker can effortlessly gain unauthorized access to the device. Audited against the hierarchical output of 'show running-config' (run 'terminal length 0' first; not 'show running-config formal').
Kako se proverava
Metod provere: Obrazac konfiguracije
- Obrazac
(?m)(?i)^snmp-server community public(?:\s|$)
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
! Disable the default SNMP community string "public" no snmp-server community {community_string}
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- cisco-iosxrnetworksnmp
- Referenca
- CIS Cisco IOS XR 7.x Benchmark v1.0.1 - 1.5.2 Unset 'public' for 'snmp-server community'
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target cisco-iosxr