SNMP Vulnerability - Virgin Media security alert

[MartinJ5]

Hello

Another user posted the same last year but advice was not given in response. I am being told a device on my network may have an snmp vulnerability.

Your instructions are below

Hub 3

To close the vulnerable port on the Virgin Media Hub 3:

• Access your Hub's configuration page - default web address: 192.168.0.1
• Login with your username and password, default will be shown on the Hub itself
• Select Security on the left side of the page
• Select the Port Forwarding option
• Remove any rules that will keep ports 161 & 162 open
• The hub does not allow you to remove the option
• Select the Port Triggering option
• Remove any rules that will keep ports 161 & 162 open

Please tell me how to resolve this or how to  identify the Mac address of the device responsible without leaving wireshark to run endlessly.

Thanks

Martin

[legacy1]

NAT being NAT VM can't tell what MAC it is for them to wireshark their end so you have to do it your end.

I was thinking that the hub don't allow you to Port Forward them ports anyway only in modem mode do you get mostly everything except 137,138 135, 139 and 445.

made me wonder if you have something DoS out to them port then in.