SNMP Arbitrary Command Execution

Kert Ojasoo
Jun 18, 2019 · 7 min read

SNMP, the Simple Network Management Protocol, which in certain communities is better known as Security Not My Problem, is a protocol to monitor and manage networked devices.

Many devices like modems, routers, servers, printers, IP cameras, UPS devices and even power strips may have SNMP installed by default. Searching Shodan.io for port 161, the port most commonly used by SNMP, returns more than 2 million results.

While some of these hosts are honeypots, keep in mind that the amount of misconfigured SNMP servers in various internal networks might…