SNMP (MIB Dump)
Subtechnique · ATTACK:enterprise:T1602.001
Attributed source ↗ · Plaintext record · Complete record and assertions JSON
Inspect structured metadata and provenance
{
"id": "ATTACK:enterprise:T1602.001",
"title": "SNMP (MIB Dump)",
"type": "Subtechnique",
"source_url": "https://attack.mitre.org/techniques/T1602/001",
"snapshot": "enterprise-attack-20.0.json",
"status": "active",
"rights": "Source metadata only; source notices retained; no operational prose or payloads",
"review_status": "machine-extracted; source-specific checks passed, editorial review pending",
"stix_id": "attack-pattern--ee7ff928-801c-4f34-8a99-3df965e581a5",
"external_id": "T1602.001",
"domain": "enterprise",
"created": "2020-10-19T23:51:05.953Z",
"modified": "2025-10-24T17:49:34.969Z",
"version": "1.1",
"aliases": [
],
"tactics": [
"collection"
],
"source_references": [
{
"source_name": "SANS Information Security Reading Room Securing SNMP Securing SNMP",
"url": "https://www.sans.org/reading-room/whitepapers/networkdevs/securing-snmp-net-snmp-snmpv3-1051"
},
{
"source_name": "US-CERT-TA18-106A",
"url": "https://www.us-cert.gov/ncas/alerts/TA18-106A"
},
{
"source_name": "Cisco Blog Legacy Device Attacks",
"url": "https://community.cisco.com/t5/security-blogs/attackers-continue-to-target-legacy-devices/ba-p/4169954"
},
{
"source_name": "Cisco Advisory SNMP v3 Authentication Vulnerabilities",
"url": "https://tools.cisco.com/security/center/content/CiscoAppliedMitigationBulletin/cisco-amb-20080610-SNMPv3"
}
]
}Explicit source assertions (8)
First 80 shown here; the complete set is in this record’s JSON and plaintext. Each relationship retains its source and locator. No inferred relationships are added.
ATTACK:enterprise:M1054 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--1cd3a9af-420f-45b6-a8b1-246332b1c49d
Cisco Securing SNMPATTACK:enterprise:M1051 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--21907ead-e794-49fd-aa4b-df2c51cdc599
Cisco Blog Legacy Device AttacksATTACK:enterprise:G1045 → uses → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--4beefef9-978b-4834-8154-9aa892b41da8
CISA_AA25-239ASaltTyphoon_Sept2025ATTACK:enterprise:M1041 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--86c58566-41e5-452f-b649-b481bfbd1202
US-CERT TA17-156A SNMP Abuse 2017ATTACK:enterprise:M1031 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--95d846ca-5705-4a69-9d76-7d886ce86cec
US-CERT-TA18-106AATTACK:enterprise:T1602.001 → subtechnique-of → ATTACK:enterprise:T1602
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--97d152a1-4cbd-4088-b23e-99354a730e47
ATTACK:enterprise:M1030 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--bd6e2eb9-a024-446f-bf9e-46c7ce4d8919
US-CERT TA17-156A SNMP Abuse 2017ATTACK:enterprise:M1037 → mitigates → ATTACK:enterprise:T1602.001
MITRE ATT&CK: Source assertion; no new actor identity, alias equivalence, CVE exploitation or causal inference. Procedure prose omitted.
Assertion source · Locator: relationship--eaa4e3f4-e3f6-4c1e-9cbf-4801028abfea
US-CERT TA17-156A SNMP Abuse 2017