Key Points
- SNMPv3 upgrade recommended over legacy SNMPv1/v2 protocols
- CVE-2018-0171 and other old flaws still actively exploited in 2026
- Russian hackers targeting routers at energy, finance, healthcare sectors
What is changing
Government agencies from 19 countries warn that enterprises need better router security. Russian state-sponsored attackers are scanning for vulnerable network devices using old tactics that still work today.
These hackers send Simple Network Management Protocol requests to find routers using weak default passwords. They steal configuration files containing network details and credentials, often targeting the same Cisco router vulnerabilities from years ago including CVE-2018-0171.
Why it matters
This matters most to network security teams and IT administrators who manage enterprise infrastructure. Many organizations treat routers as “set-and-forget” devices instead of actively monitoring them like endpoints.
Attackers are compromising critical systems in communications, energy, financial services, and healthcare sectors through straightforward exploits. The risk is significant because routers are often critical to business operations but receive less security attention than other systems.
Have you audited your network devices for SNMPv1/v2 usage or disabled Cisco Smart Install? Share your experience below.