Detections
Analytics

1.29 VCSA-80-000265

Information

The vCenter server must disable SNMPv1/2 receivers.

GROUP ID: V-258932RULE ID: SV-258932r961878

SNMPv3 supports commercial-grade security, including authentication, authorization, access control, and privacy. Previous versions of the protocol contained well-known security weaknesses that were easily exploited. Therefore, SNMPv1/2 receivers must be disabled, while SNMPv3 is configured in another control. vCenter exposes SNMP v1/2 in the UI and SNMPv3 in the CLI.

Solution

From the vSphere Client, go to Host and Clusters.

Select a vCenter Server >> Configure >> Settings >> General.

Click "Edit".

On the "SNMP receivers" tab, ensure all receivers are disabled.

See Also

https://workbench.cisecurity.org/benchmarks/23621

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3(1), CAT|II, CCI|CCI-001967, Rule-ID|SV-258932r961878_rule, STIG-ID|VCSA-80-000265, Vuln-ID|V-258932

Plugin: VMware

Control ID: 41c964a4ce5a7aa261076815c3219df5cdfa9c7eaf9e38d1107fcdac15ea63fb