Executive Summary:
| Because SNMP runs over the Internet, it can pose a security risk if it's improperly configured on Microsoft Windows servers. ServerAlerts.vbs uses Microsoft Windows Management Instrumentation (WMI) to check Windows servers for SNMP security vulnerabilities. For each server it checks, ServerAlerts.vbs reports its findings in a Microsoft Excel worksheet whose tab is colorized to denote the server's status. An additional Microsoft Excel worksheet includes hyperlinks to the server worksheets; the hyperlinks are color coded and grouped so you can easily spot problematic servers. |
Because SNMP runs over the Internet, it can pose a security risk if it's improperly configured. I wrote ServerAlerts.vbs to check servers for SNMP security vulnerabilities. Specifically, it checks the SNMP community string. Community strings define what can be done on a server through SNMP. By default, out-of-the-box SNMP implementations typically use the "public" community string, which is configured to let a remote device retrieve information from a server (i.e., Read-Only privileges) and the "private" community string, which is configured to let a remote device read and modify settings on that server (Read-Write privileges). To secure servers, you should customize the community strings and typically use only No Access or Read-Only privileges. . . .
Register
