Detections
Analytics

1.195 SOL-11.1-080160

Information

SNMP communities, users, and passphrases must be changed from the default.

GROUP ID: V-216456
RULE ID: SV-216456r959010

Whether active or not, default SNMP passwords, users, and passphrases must be changed to maintain security. If the service is running with the default authenticators, then anyone can gather data about the system and the network and use the information to potentially compromise the integrity of the system or network(s).

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

The root role is required.

Change the default snmpd.conf community passwords. To change them, locate the snmpd.conf file and edit it.

# pfedit [filename]

Locate the line system-group-read-community which has a default password of public and make the password something more random (less guessable). Make the same changes for the lines that read system- group-write-community, read-community, write-community, trap, and trap-community. Read the information in the file carefully. The trap is defining who to send traps to, for instance, by default. It is not a password, but the name of a host.

See Also

https://workbench.cisecurity.org/benchmarks/23765

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-216456r959010_rule, STIG-ID|SOL-11.1-080160, Vuln-ID|V-216456

Plugin: Unix

Control ID: eff4a5a34aa8a998396baecfa737dd1bbfa46ad7540eef8e4f70030ffe789110