iSID Analyst Knowledge Base

Definitions, and additional context on iSID alerts along with helpful recommendations

Category: protocol-snmp

( 1 Alerts)

PROTOCOL-SNMP request udp

This alert is triggered when an external source sends an SNMP getbulk request to an internal Windows server on UDP port 161. This behavior may be associated with attempts to gather large amounts of SNMP data, potentially exploiting CVE-2006-5583 a known vulnerability in Windows SNMP services.