Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

SNMP community is hard coded to public #260

Open
MicSkr opened this issue Jul 20, 2023 · 0 comments
Open

SNMP community is hard coded to public #260

MicSkr opened this issue Jul 20, 2023 · 0 comments
Labels
bug Something isn't working untriaged Issue needs to be reviewed for validity

Comments

@MicSkr
Copy link

MicSkr commented Jul 20, 2023

Environment

  • Telemetry Streaming Version: 1.33
  • BIG-IP Version: N/A

Summary

SNMP community is hard coded to public
No way to specify SNMP Community.

Good Security practices include removing SNMP community strings or changing from public.
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-108 (Search for "community" to understand)

Steps To Reproduce

Steps to reproduce the behavior:

  1. Submit the following declaration:
    Anything using the example SNMP declaration as a model
    https://clouddocs.f5.com/products/extensions/f5-telemetry-streaming/latest/declarations.html#querying-snmp-using-a-custom-endpoint

  2. Change SNMP community string from Public
    https://www.cisa.gov/news-events/news/securing-network-infrastructure-devices
    https://www.cisa.gov/news-events/alerts/2017/06/05/reducing-risk-snmp-abuse

  3. Observe the following error response:
    Any device where a custom community string has been configured does not produce SNMP

Expected Behavior

Include a field which can specify the SNMP community

Actual Behavior

Hard Coded Community String here, Line 121 of lib/systemStats.js

utilCmdArgs: `-c "snmpwalk -L n -O ${additionalOptions}QUs -c public localhost ${endpoints[endpoint].path}"`

@MicSkr MicSkr added bug Something isn't working untriaged Issue needs to be reviewed for validity labels Jul 20, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working untriaged Issue needs to be reviewed for validity
Projects
None yet
Development

No branches or pull requests

1 participant