security vulnerabilities and SNMPv1


			Security vulnerabilities that may exist in network devices using SNMPv1 as the management protocol

				tech Note 24

	home page contacts email		On February 12, 2002 the CERT®/CC released an advisory ( CA-2002-03) related to security vulnerabilities that may exist in network devices using SNMPv1 as the management protocol. In response to this advisory, MGE UPS SYSTEMS began executing the tests that elicit these vulnerabilities for all MGE UPS SYSTEMS products that feature SNMPv1 capability. MGE UPS SYSTEMS have different SNMP based products: 1 - SNMP Card plugged directly in UPS Under direct SNMP attack the SNMP card may stop responding, but it does not affect the operation of the UPS. Patch solving this problem is currently available for SNMP Card 66245 version 3.82 for download from the MGE UPS SYSTEMS website. Other patches or new products will be available on the MGE UPS SYSTEMS download web site in the next weeks. 2 - SNMP Agent used on host machines Such proxy agent is based on the extended native SNMP agent of your operating system, see your operating system manufacturer for the latest security enhancements.