> what you can do with the bits of information you named when this vulnerability is not present? If you have SNMP write access you can effectively control the

> what you can do with the bits of information you named when this vulnerability is not present? If you have SNMP write access you can effectively control the ASA. You could for example get the ASA to fetch a new configuration from your own TFTP server. For example: http://www.cisco.com/c/en/us/support/docs/ip/simple-network-management-protocol-snmp/15217-copy-configs-snmp.html http://www.cisco.com/c/en/us/support/docs/ip/simple-network-... Hence why SNMP is always protected by an ACL. If you have SNMP exposed then you already have big problems.