The SNMP service must use only SNMPv3 or its successors.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN005305-ESXI5-PF	GEN005305-ESXI5-PF	GEN005305-ESXI5-PF_rule		Medium

Description
SNMP Versions 1 and 2 are not considered secure. Without the strong authentication and privacy that is provided by the SNMP Version 3 User-based Security Model (USM), an attacker or other unauthorized users may gain access to detailed system management information and use that information to launch attacks against the system. Permanent finding - snmp-v2 is used.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN005305-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.

Fix Text (F-GEN005305-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.