If SNMP is not properly configured, monitoring information can be sent to a malicious host. The malicious host can then use this information to plan an attack.
SNMP must be configured on each ESXi host. You can use vCLI, PowerCLI, or the vSphere Web Services SDK for configuration.
See the Monitoring and Performance publication for detailed setup information for SNMP 3.