Wireless encryption key displayed via unauthenticated SNMP Walk

Products ePMP
1

SW ver 2.4

Is this by design or a bug? Seems extremely insecure to us. 

OID for both SMs and APs is: 1.3.6.1.4.1.17713.21.3.8.2.4.0

2

Strange.  For me on V2.4 I can only see the key when I use the read-write community string, read-only cannot display that field.

j

3

Just changed the RW community to be sure (left the RO alone, which is what I was using) and it still definitely shows up  (for us at least) walking with the RO string.