SNMP Agent Default Community Name (public)

medium Nessus Plugin ID 41028

Language:

Synopsis

The community name of the remote SNMP server can be guessed.

Description

It is possible to obtain the default community name of the remote SNMP server.

An attacker may use this information to gain more knowledge about the remote host, or to change the configuration of the remote system (if the default community allows such modifications).

Solution

Disable the SNMP service on the remote host if you do not use it.
Either filter incoming UDP packets going to this port, or change the default community string.

Plugin Details

Severity: Medium

ID: 41028

File Name: snmp_default_public_community.nasl

Version: 1.15

Type: Remote

Family: SNMP

Published: 11/25/2002

Updated: 9/29/2026

Configuration: Enable thorough checks (optional)

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.8

Percentile: 22.6

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS Score Source: CVE-1999-0517

CVSS v3

Risk Factor: Medium

Base Score: 5.9

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS Score Source: CVE-1999-0517

Vulnerability Information

Exploit Ease: No exploit is required

Vulnerability Publication Date: 11/17/1998

Reference Information

CVE: CVE-1999-0517

BID: 2112

Detections

Analytics