STIGQter: STIG Summary: Solaris 11 X86 Security Technical Implementation Guide Version: 3 Release: 6 Benchmark Date: 01 Jul 2026:

SNMP default community strings and passphrases must be changed from vendor defaults.

DISA Rule

SV-216220r1190834_rule

Vulnerability Number

V-216220

Group Title

SRG-OS-000480

Rule Version

SOL-11.1-080160

Severity

CAT I

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

The root role is required.

Stop the SNMP service:

# svcadm disable svc: /application/management/net-snmp:default

Open the /etc/snmp/snmpd.conf file and remove any lines containing default values.

# pfedit [/path/filename]

Create a new SNMPv3 user with strong authentication and privacy keys (if the service is required).

Restart the service (if the service is required).

# svcadm enable svc: /application/management/net-snmp:default

Ensure the permissions on the configuration files are restricted:

# chmod 600 /etc/snmp/snmp.conf

Check Contents

Verify the Solaris 11 system does not use default SNMP community strings or passphrases.

The root role is required.

Find any occurrences of the snmpd.conf file delivered with Solaris packages:

# pkg search -l -Ho path snmpd.conf | awk '{ print "/"$1 }'
/etc/net-snmp/snmp/snmpd.conf

For each listed file, use the following command to review its contents:

# more [filename]

Review SNMP trap configurations for default community strings:

# grep trap /etc/net-snmp/snmp/snmpd.conf

Identify any community names, trap communities, or user password configurations set to default values.
Examples: public, private, trap, public@localhost, password

If any default values are present, this is a finding.

Vulnerability Number

V-216220

Documentable

False

Rule Version

SOL-11.1-080160

Severity Override Guidance

Check Content Reference

Target Key

4021