MEDIUM
Source
CloudSploit
ID
open-snmp

Open SNMP

Determine if UDP port 161 for SNMP is open to the public

SNMP UDP 161 used by various devices and applications for logging events, monitoring and management. Allowing Inbound traffic from any external IP address on port 161 is vulnerable to DoS attack. It is a best practice to block port 161 completely unless explicitly required.

Restrict UDP port 161 to known IP addresses.