NSA urges network operators to replace legacy SNMP after Russian router intrusions
A post on October 19th points to joint guidance issued in July, detailing how FSB-linked actors used exposed management services to steal router configurations.
By Ryan Merket · Published
Primary source: X
Why it matters
The advisory documents a route from exposed router management services to configuration files that can reveal credentials and network details. SNMPv3 helps close the legacy-protocol gap, while access restrictions, monitoring, patching and replacing end-of-life devices address the wider exposure.
The NSA urged network administrators on October 19th to move network devices to SNMPv3, pointing to Russian state-linked intrusions that used weakly configured routers to collect network configuration files. The post directs administrators to joint guidance the agency and its partners released on July 13th, not a newly published technical advisory.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.