Product:
Cisco IOS and IOS XE Software
Summary
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause it to reload. These vulnerabilities are due to a buffer overflow condition in the SNMP subsystem and affect all versions of SNMP. Exploitation requires knowledge of the SNMP read-only community string or user credentials, depending on the SNMP version used.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2017-6738 |
Exploitation
An attacker can exploit these vulnerabilities by sending a crafted SNMP packet to an affected system over IPv4 or IPv6. For SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string. For SNMP Version 3, the attacker must have valid user credentials. Successful exploitation can lead to arbitrary code execution or system reload.
Affected Products
- All versions of Cisco IOS and IOS XE Software with SNMP enabled are affected.
- Devices that have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.
Mitigation
Customers are advised to apply the workaround as contained in the Workarounds section. It is also recommended to apply updates as per vendor instructions to mitigate these vulnerabilities.