PT-2017-2512 · Cisco · Cisco Ios Xe+1
Published
2017-06-29
·
Updated
2025-07-31
·
CVE-2017-6738
CVSS v2.0
9.0
High
| Vector | AV:N/AC:L/Au:S/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6
Cisco IOS XE versions 2.2 through 3.17
Description
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS contains multiple vulnerabilities due to a buffer overflow condition. These vulnerabilities could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload by sending a crafted SNMP packet via IPv4 or IPv6. The vulnerabilities affect all versions of SNMP: Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system.
Recommendations
For Cisco IOS versions 12.0 through 12.4 and 15.0 through 15.6, apply the software updates released by Cisco to address these vulnerabilities.
For Cisco IOS XE versions 2.2 through 3.17, apply the software updates released by Cisco to address these vulnerabilities.
As a temporary workaround, consider disabling the SNMP service until a patch is available.
Restrict access to the affected MIBs or OIDs to minimize the risk of exploitation.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Cisco Ios
Cisco Ios Xe