Uploaded image for project: 'EtherNet/IP Core V3'
  1. EtherNet/IP Core V3
  2. PSEIP-917

Remove support of SNMP GetBulk service

    Details

    • Type: Change
    • Status: Closed
    • Priority: Minor
    • Resolution: Fixed
    • Affects Version/s: None
    • Fix Version/s: V3.8.6.0
    • Component/s: None
    • Labels:
      None
    • Account:
      SPC EthernetIp Core (SPCETHERNET)

      Description

      The SNMP protocol implemented in the lwIP component shall not support the service "GetBulk".

      This is due to a potential security vulnerability:

      OpenVAS scans the product for known vulnerabilities. During the OpenVAS scan on MCM controller with the filedbus EthernetIP, and scan results reported that
      "By sending an SNMP GetBulk request of 41 bytes, we received a response of 960 bytes".

      By sending high number of request could create Denial of Service. Successfully exploiting this vulnerability allows attackers to cause denial-of-service conditions against hosts.

      Action Items:

      • Statically switch off the support o "Getbulk" by calling LwIP_Snmp_SetGetBulkSupport(false) during SNMP initialization.
        The GetBulk service cannot be activated, neither by the host nor by a client in the network.
      • Write a test case that ensures that the GetBulk service is not supported.
      • Add migration note stating that the GetBulk service is not supported anymore.

        Attachments

          Expenses

            Activity

              Status Description

                People

                • Reporter:
                  KMichel Kai Michel
                • Votes:
                  0 Vote for this issue
                  Watchers:
                  0 Start watching this issue

                  Dates

                  • Created:
                    Updated:
                    Resolved: