SNMP_NT UserList

 

Code: p517

Severity: Warning

 

Description: This event is generated when an attempt is made by Simple Network Management Protocol (SNMP) to enumerate Server Message Block (SMB) users on the host.

Impact: Reconnaissance. An attacker may obtain SMB usernames of the remote host.

Corrective: Block inbound SNMP traffic. Disable SNMP as a listening service on the remote host unless it is required.