I read on Wikipedia's Article on SNMP

SNMPv1 and v2 are vulnerable to IP spoofing attacks, whether it runs over TCP or UDP, and is a subject to bypassing device access lists that might have been implemented to restrict SNMP access.

I'd like to ask why.

  • There is a "citation needed" flag. I can find no reference that SNMP over TCP is vulnerable.
    – schroeder
    Commented Feb 4, 2020 at 14:14
  • I'd really appreciate even an answer as to why it's vulnerable over UDP :)
    – PhantomR
    Commented Feb 4, 2020 at 14:20
  • 1
    That's really easy to look up. UDP is connectionless.
    – schroeder
    Commented Feb 4, 2020 at 14:22
  • 1
    Strictly speaking, SNMP is vulnerable to IP Spoofing because it does not verify the sender IP. That's potentially interesting if sent over TCP, but not at all interesting if using UDP. So, to be able to answer you, we need to know what you need to know.
    – schroeder
    Commented Feb 4, 2020 at 14:27
  • 1
    That's right: you don't need a reply. If the SNMP server is set to only accept connections from a whitelist, then you can spoof an IP on the whitelist and issue commands. Very bad news (and bad design). IP spoofing in TCP will fail before passing data because the initial handshake will fail. So, I'm interested in the TCP IP spoofing vulnerability, if there is one
    – schroeder
    Commented Feb 4, 2020 at 15:07

1 Answer 1


SMMP is used to manage low-end devices, they usually have only rudimentary networm stacks. No firewall, for one.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .