SNMP V3 Communication ( Security- HMAC )

[Anon]

Hi all,

My Security Team has pointed out a point regarding SNMP v3 communication.
There could be a security problem. It could be possible to bypass the authentication function.
SNMPv3 use Hash Message Authentication Code (HMAC), described in RFC3414 and this use HMAC-MD5-96 or HMAC-SHA-96.

The Problem could be that a System send out a one Byte HMAC to authenticate successful.

https://www.rapid7.com/db/vulnerabilities/snmp-snmpv3-hmac-auth-spoofing.

Is this security issue with prognosis? Or how was this problem resolved?

Many Thanks

Carsten

[Anon]

HI Carsten,

thanks for letting us know about your concern as security is most important. I can't confirm this but will help to get colleagues from the product team to look at this.

[GeraldC]

Hi Carsten, Our product team confirm that Prognosis 11.1 and later should not have this vulnerability. Let us know if any further queries about it. HTH