Product:
Cisco IOS and IOS XE Software
Summary
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause it to reload. These vulnerabilities are due to a buffer overflow condition in the SNMP subsystem and affect all versions of SNMP. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2017-6744 |
Exploitation
An attacker can exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. For SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string. For SNMP Version 3, the attacker must have user credentials. Only traffic directed to an affected system can be used to exploit these vulnerabilities.
Affected Products
- All versions of SNMP – Versions 1, 2c, and 3 are affected.
- Devices with SNMP enabled that have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.
Mitigation
Customers are advised to apply the workaround as contained in the Workarounds section. Fixed software information is available via the Cisco IOS Software Checker.