SNMP Reflection DDoS Vulnerability reported on StorageGRID Admin nodes
Applies to
StorageGRID 12.0
Issue
- SNMP Reflection DDoS Vulnerability reported on StorageGRID Admin and loadbalancer nodes.
- Vulnerability Name : SNMP Agent Default Community Name (public) , SNMP 'GETBULK' Reflection DDoS
Output : Plugin Output: The remote SNMP server replies to the following default community string : Public
Plugin Output: Nessus was able to determine the SNMP service can be abused in an SNMP
Reflection DDoS attack :
Request size (bytes) : 42
Response size (bytes) : 2079
