SNMP? How can this be?

A TrustedSec consultant recounts a penetration test in which clear-text username and password values found in an SNMP MIB for a newly purchased network document center were used to authenticate to workstations via SMB, obtain local admin, escalate privileges to create a Domain Admin account, and access stored PCI data — illustrating how exposed device credentials and misconfiguration can lead to full domain compromise and sensitive data exposure.