General remote services SNMP GETBULK Reflected Distributed Denial-of-Service Vunlnerability

A SNMP GetBulk request performs multiple GetNext requests and returns the result in a single response. This request can be masqueraded by malicious attackers to launch a SNMP GetBulk flood against a targeted server.

QID Detection Logic:
Sends a SNMP GetBulk request and checks for response.

Successful exploitation allows unauthenticated, remote attackers to cause denial-of-service conditions against targeted remote hosts.

N/A

Workaround:
Customers are advised to disable unauthenticated, public SNMPv2 access and enable SNMPv3.