I read on Wikipedia's Article on SNMP

SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs over TCP or UDP, and is a subject to bypassing device access lists that might have been implemented to restrict SNMP access.

I'd like to ask why.

  • There is a "citation needed" flag. I can find no reference that SNMP over TCP is vulnerable. – schroeder Feb 4 '20 at 14:14
  • I'd really appreciate even an answer as to why it's vulnerable over UDP :) – PhantomR Feb 4 '20 at 14:20
  • 1
    That's really easy to look up. UDP is connectionless. – schroeder Feb 4 '20 at 14:22
  • 1
    Strictly speaking, SNMP is vulnerable to IP Spoofing because it does not verify the sender IP. That's potentially interesting if sent over TCP, but not at all interesting if using UDP. So, to be able to answer you, we need to know what you need to know. – schroeder Feb 4 '20 at 14:27
  • 1
    That's right: you don't need a reply. If the SNMP server is set to only accept connections from a whitelist, then you can spoof an IP on the whitelist and issue commands. Very bad news (and bad design). IP spoofing in TCP will fail before passing data because the initial handshake will fail. So, I'm interested in the TCP IP spoofing vulnerability, if there is one – schroeder Feb 4 '20 at 15:07

SMMP is used to manage low-end devices, they usually have only rudimentary networm stacks. No firewall, for one.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.