Product:
SNMP
Summary
A vulnerability in the SNMP implementation could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area and affects all versions of SNMP. An attacker must know the SNMP read-only community string or user credentials to exploit this vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2017-6739 |
Exploitation
To exploit this vulnerability, an attacker must send a crafted SNMP packet to the affected device. The attacker needs to have knowledge of the SNMP read-only community string for SNMP version 2c or earlier, or user credentials for SNMPv3. Only traffic directed to the affected system can be used for exploitation, allowing the attacker to execute arbitrary code or cause a system reload.
Affected Products
- All versions of SNMP (versions 1, 2c, and 3) are affected by this vulnerability.
- IOS versions 12.0 to 12.4 and 15.0 to 15.6 are vulnerable.
- IOS XE versions 2.2 to 3.17 are also impacted.
Mitigation
To mitigate this vulnerability, it is recommended to apply updates as per the vendor’s instructions. Ensuring that SNMP is properly configured and that unnecessary community strings or user credentials are not exposed can also help reduce the risk.