An SNMP community name is the default (e.g. public), null, or missing.

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K04463175 advisory.

  - An SNMP community name is the default (e.g. public), null, or missing. (CVE-1999-0517)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is possible to obtain the default community name of the remote SNMP server.

An attacker may use this information to gain more knowledge about the remote host, or to change the configuration of the remote system (if the default community allows such modifications).

It is possible to obtain the default community names of the remote SNMP server.

An attacker can use this information to gain more knowledge about the remote host or to change the configuration of the remote system (if the default community allows such modifications).

ID	Name	Product	Family	Type	Severity
184222	F5 Networks BIG-IP : SNMPv2 vulnerability (K04463175)	Nessus	F5 Networks Local Security Checks	Local	critical
41028	SNMP Agent Default Community Name (public)	Nessus	SNMP	Remote	high
10264	SNMP Agent Default Community Names	Nessus	SNMP	Remote	critical

Detections

Analytics

CVE-1999-0517

medium

Tenable Plugins

critical

high

critical