Exploited
CWE
119
Advisory Published
Updated

CVE-2017-6738: Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

First published: Mon Jul 17 2017(Updated: )

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.2 through 3.17 contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP: Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. Cisco Bug IDs: CSCve89865, CSCsy56638.

Credit: ykramarz@cisco.com ykramarz@cisco.com

Affected SoftwareAffected VersionHow to fix
Cisco IOS=12.2\(33\)sxi
Cisco IOS=12.2\(33\)sxi1
Cisco IOS=12.2\(50\)se
Cisco IOS=12.2\(50\)se1
Cisco IOS=12.2\(50\)se2
Cisco IOS=12.2\(50\)se3
Cisco IOS=12.2\(50\)se4
Cisco IOS=12.2\(50\)se5
Cisco IOS=12.2\(50\)sg
Cisco IOS=12.2\(50\)sg1
Cisco IOS=12.2\(50\)sg2
Cisco IOS=12.2\(50\)sg3
Cisco IOS=12.2\(50\)sg4
Cisco IOS=12.2\(50\)sg5
Cisco IOS=12.2\(50\)sg6
Cisco IOS=12.2\(50\)sg7
Cisco IOS=12.2\(50\)sg8
Cisco IOS=12.2\(50\)sq
Cisco IOS=12.2\(50\)sq1
Cisco IOS=12.2\(50\)sq2
Cisco IOS=12.2\(50\)sq3
Cisco IOS=12.2\(50\)sq4
Cisco IOS=12.2\(50\)sq5
Cisco IOS=12.2\(50\)sq6
Cisco IOS=12.2\(50\)sq7
Cisco IOS=12.2\(52\)ex
Cisco IOS=12.2\(52\)ex1
Cisco IOS=12.2\(52\)ey
Cisco IOS=12.2\(52\)ey1
Cisco IOS=12.2\(52\)ey1b
Cisco IOS=12.2\(52\)ey1c
Cisco IOS=12.2\(52\)ey2
Cisco IOS=12.2\(52\)ey2a
Cisco IOS=12.2\(52\)ey3
Cisco IOS=12.2\(52\)ey3a
Cisco IOS=12.2\(52\)ey4
Cisco IOS=12.2\(52\)se
Cisco IOS=12.2\(52\)se1
Cisco IOS=12.2\(52\)sg
Cisco IOS=12.2\(52\)xo
Cisco IOS=12.2\(53\)ex
Cisco IOS=12.2\(53\)ey
Cisco IOS=12.2\(53\)ez
Cisco IOS=12.2\(53\)se
Cisco IOS=12.2\(53\)se1
Cisco IOS=12.2\(53\)se2
Cisco IOS=12.2\(53\)sg
Cisco IOS=12.2\(53\)sg1
Cisco IOS=12.2\(53\)sg2
Cisco IOS=12.2\(53\)sg3
Cisco IOS=12.2\(53\)sg4
Cisco IOS=12.2\(53\)sg5
Cisco IOS=12.2\(53\)sg6
Cisco IOS=12.2\(53\)sg7
Cisco IOS=12.2\(53\)sg8
Cisco IOS=12.2\(53\)sg9
Cisco IOS=12.2\(53\)sg10
Cisco IOS=12.2\(53\)sg11
Cisco IOS=12.2\(54\)se
Cisco IOS=12.2\(54\)sg
Cisco IOS=12.2\(54\)sg1
Cisco IOS=12.2\(54\)wo
Cisco IOS=12.2\(54\)xo
Cisco IOS=12.2\(55\)ex
Cisco IOS=12.2\(55\)ex1
Cisco IOS=12.2\(55\)ex2
Cisco IOS=12.2\(55\)ex3
Cisco IOS=12.2\(55\)ey
Cisco IOS=12.2\(55\)ez
Cisco IOS=12.2\(55\)se
Cisco IOS=12.2\(55\)se1
Cisco IOS=12.2\(55\)se2
Cisco IOS=12.2\(55\)se3
Cisco IOS=12.2\(55\)se4
Cisco IOS=12.2\(55\)se5
Cisco IOS=12.2\(55\)se6
Cisco IOS=12.2\(55\)se7
Cisco IOS=12.2\(55\)se8
Cisco IOS=12.2\(55\)se9
Cisco IOS=12.2\(55\)se10
Cisco IOS=12.2\(55\)se11
Cisco IOS=12.2\(58\)ex
Cisco IOS=12.2\(58\)ey
Cisco IOS=12.2\(58\)ey1
Cisco IOS=12.2\(58\)ey2
Cisco IOS=12.2\(58\)ez
Cisco IOS=12.2\(58\)se
Cisco IOS=12.2\(58\)se1
Cisco IOS=12.2\(58\)se2
Cisco IOS=12.2\(60\)ez
Cisco IOS=12.2\(60\)ez1
Cisco IOS=12.2\(60\)ez2
Cisco IOS=12.2\(60\)ez3
Cisco IOS=12.2\(60\)ez4
Cisco IOS=12.2\(60\)ez5
Cisco IOS=12.2\(60\)ez6
Cisco IOS=12.2\(60\)ez7
Cisco IOS=12.2\(60\)ez8
Cisco IOS=12.2\(60\)ez9
Cisco IOS=12.2\(60\)ez10
Cisco IOS=12.2\(60\)ez11
Cisco IOS=15.0\(1\)ex
Cisco IOS=15.0\(1\)ey
Cisco IOS=15.0\(1\)ey1
Cisco IOS=15.0\(1\)ey2
Cisco IOS=15.0\(1\)se
Cisco IOS=15.0\(1\)se1
Cisco IOS=15.0\(1\)se2
Cisco IOS=15.0\(1\)se3
Cisco IOS=15.0\(1\)xo
Cisco IOS=15.0\(1\)xo1
Cisco IOS=15.0\(2\)ea1
Cisco IOS=15.0\(2\)eb
Cisco IOS=15.0\(2\)ec
Cisco IOS=15.0\(2\)ed
Cisco IOS=15.0\(2\)ed1
Cisco IOS=15.0\(2\)eh
Cisco IOS=15.0\(2\)ej
Cisco IOS=15.0\(2\)ej1
Cisco IOS=15.0\(2\)ek
Cisco IOS=15.0\(2\)ek1
Cisco IOS=15.0\(2\)ex
Cisco IOS=15.0\(2\)ex1
Cisco IOS=15.0\(2\)ex2
Cisco IOS=15.0\(2\)ex3
Cisco IOS=15.0\(2\)ex4
Cisco IOS=15.0\(2\)ex5
Cisco IOS=15.0\(2\)ex8
Cisco IOS=15.0\(2\)ex10
Cisco IOS=15.0\(2\)ey
Cisco IOS=15.0\(2\)ey1
Cisco IOS=15.0\(2\)ey2
Cisco IOS=15.0\(2\)ey3
Cisco IOS=15.0\(2\)ez
Cisco IOS=15.0\(2\)se
Cisco IOS=15.0\(2\)se1
Cisco IOS=15.0\(2\)se2
Cisco IOS=15.0\(2\)se3
Cisco IOS=15.0\(2\)se4
Cisco IOS=15.0\(2\)se5
Cisco IOS=15.0\(2\)se6
Cisco IOS=15.0\(2\)se7
Cisco IOS=15.0\(2\)se9
Cisco IOS=15.0\(2\)se10
Cisco IOS=15.0\(2\)se10a
Cisco IOS=15.0\(2\)sg
Cisco IOS=15.0\(2\)sg1
Cisco IOS=15.0\(2\)sg2
Cisco IOS=15.0\(2\)sg3
Cisco IOS=15.0\(2\)sg4
Cisco IOS=15.0\(2\)sg5
Cisco IOS=15.0\(2\)sg6
Cisco IOS=15.0\(2\)sg7
Cisco IOS=15.0\(2\)sg8
Cisco IOS=15.0\(2\)sg9
Cisco IOS=15.0\(2\)sg10
Cisco IOS=15.0\(2\)sg11
Cisco IOS=15.0\(2\)sqd
Cisco IOS=15.0\(2\)sqd1
Cisco IOS=15.0\(2\)sqd2
Cisco IOS=15.0\(2\)sqd3
Cisco IOS=15.0\(2\)sqd5
Cisco IOS=15.0\(2\)sqd6
Cisco IOS=15.0\(2\)xo
Cisco IOS=15.0\(2a\)ex5
Cisco IOS=15.0\(2a\)se9
Cisco IOS=15.1\(1\)sg
Cisco IOS=15.1\(1\)sg1
Cisco IOS=15.1\(1\)sg2
Cisco IOS=15.1\(2\)sg
Cisco IOS=15.1\(2\)sg1
Cisco IOS=15.1\(2\)sg2
Cisco IOS=15.1\(2\)sg3
Cisco IOS=15.1\(2\)sg4
Cisco IOS=15.1\(2\)sg5
Cisco IOS=15.1\(2\)sg6
Cisco IOS=15.1\(2\)sg7
Cisco IOS=15.1\(2\)sg8
Cisco IOS=15.2\(1\)e
Cisco IOS=15.2\(1\)e1
Cisco IOS=15.2\(1\)e2
Cisco IOS=15.2\(1\)e3
Cisco IOS=15.2\(1\)ey
Cisco IOS=15.2\(1\)sy
Cisco IOS=15.2\(1\)sy0a
Cisco IOS=15.2\(1\)sy1
Cisco IOS=15.2\(1\)sy1a
Cisco IOS=15.2\(1\)sy2
Cisco IOS=15.2\(1\)sy3
Cisco IOS=15.2\(1\)sy4
Cisco IOS=15.2\(2\)e
Cisco IOS=15.2\(2\)e1
Cisco IOS=15.2\(2\)e2
Cisco IOS=15.2\(2\)e3
Cisco IOS=15.2\(2\)e4
Cisco IOS=15.2\(2\)e5
Cisco IOS=15.2\(2\)e5a
Cisco IOS=15.2\(2\)ea1
Cisco IOS=15.2\(2\)ea2
Cisco IOS=15.2\(2\)ea3
Cisco IOS=15.2\(2\)eb
Cisco IOS=15.2\(2\)eb1
Cisco IOS=15.2\(2\)eb2
Cisco IOS=15.2\(2\)gc
Cisco IOS=15.2\(2\)sy
Cisco IOS=15.2\(2\)sy1
Cisco IOS=15.2\(2\)sy2
Cisco IOS=15.2\(2\)t
Cisco IOS=15.2\(2\)t1
Cisco IOS=15.2\(2\)t2
Cisco IOS=15.2\(2\)t3
Cisco IOS=15.2\(2\)t4
Cisco IOS=15.2\(2a\)e1
Cisco IOS=15.2\(3\)e
Cisco IOS=15.2\(3\)e1
Cisco IOS=15.2\(3\)e2
Cisco IOS=15.2\(3\)e3
Cisco IOS=15.2\(3\)ea
Cisco IOS=15.2\(3\)gc
Cisco IOS=15.2\(3\)gc1
Cisco IOS=15.2\(3\)t
Cisco IOS=15.2\(3\)t1
Cisco IOS=15.2\(3\)t2
Cisco IOS=15.2\(3\)t3
Cisco IOS=15.2\(3\)t4
Cisco IOS=15.2\(3a\)e
Cisco IOS=15.2\(3m\)e2
Cisco IOS=15.2\(3m\)e3
Cisco IOS=15.2\(4\)e
Cisco IOS=15.2\(4\)e1
Cisco IOS=15.2\(4\)e2
Cisco IOS=15.2\(4\)e3
Cisco IOS=15.2\(4\)e4
Cisco IOS=15.2\(4\)ea
Cisco IOS=15.2\(4\)ea1
Cisco IOS=15.2\(4\)ea3
Cisco IOS=15.2\(4\)ea4
Cisco IOS=15.2\(4\)ec1
Cisco IOS=15.2\(4\)gc
Cisco IOS=15.2\(4\)gc1
Cisco IOS=15.2\(4\)gc2
Cisco IOS=15.2\(4\)gc3
Cisco IOS=15.2\(4\)m
Cisco IOS=15.2\(4\)m1
Cisco IOS=15.2\(4\)m2
Cisco IOS=15.2\(4\)m3
Cisco IOS=15.2\(4\)m4
Cisco IOS=15.2\(4\)m5
Cisco IOS=15.2\(4\)m6
Cisco IOS=15.2\(4\)m6a
Cisco IOS=15.2\(4\)m7
Cisco IOS=15.2\(4\)m8
Cisco IOS=15.2\(4\)m9
Cisco IOS=15.2\(4\)m10
Cisco IOS=15.2\(4\)m11
Cisco IOS=15.2\(4m\)e1
Cisco IOS=15.2\(4m\)e3
Cisco IOS=15.2\(4p\)e1
Cisco IOS=15.2\(5\)e
Cisco IOS=15.2\(5\)e1
Cisco IOS=15.2\(5\)e2
Cisco IOS=15.2\(5\)e2a
Cisco IOS=15.2\(5\)ea
Cisco IOS=15.2\(5\)ex
Cisco IOS=15.2\(5a\)e
Cisco IOS=15.2\(5a\)e1
Cisco IOS=15.2\(5b\)e
Cisco IOS=15.2\(5c\)e
Cisco IOS=15.3\(1\)sy
Cisco IOS=15.3\(1\)sy2
Cisco IOS=15.3\(1\)t
Cisco IOS=15.3\(1\)t1
Cisco IOS=15.3\(1\)t2
Cisco IOS=15.3\(1\)t3
Cisco IOS=15.3\(1\)t4
Cisco IOS=15.3\(2\)t
Cisco IOS=15.3\(2\)t1
Cisco IOS=15.3\(2\)t2
Cisco IOS=15.3\(2\)t3
Cisco IOS=15.3\(2\)t4
Cisco IOS=15.3\(3\)m
Cisco IOS=15.3\(3\)m1
Cisco IOS=15.3\(3\)m2
Cisco IOS=15.3\(3\)m3
Cisco IOS=15.3\(3\)m4
Cisco IOS=15.3\(3\)m5
Cisco IOS=15.3\(3\)m6
Cisco IOS=15.3\(3\)m7
Cisco IOS=15.3\(3\)m9
Cisco IOS=15.4\(1\)cg
Cisco IOS=15.4\(1\)cg1
Cisco IOS=15.4\(1\)sy
Cisco IOS=15.4\(1\)sy1
Cisco IOS=15.4\(1\)sy2
Cisco IOS=15.4\(1\)t
Cisco IOS=15.4\(1\)t1
Cisco IOS=15.4\(1\)t2
Cisco IOS=15.4\(1\)t3
Cisco IOS=15.4\(1\)t4
Cisco IOS=15.4\(2\)cg
Cisco IOS=15.4\(2\)t
Cisco IOS=15.4\(2\)t1
Cisco IOS=15.4\(2\)t2
Cisco IOS=15.4\(2\)t3
Cisco IOS=15.4\(2\)t4
Cisco IOS=15.4\(3\)m
Cisco IOS=15.4\(3\)m1
Cisco IOS=15.4\(3\)m2
Cisco IOS=15.4\(3\)m3
Cisco IOS=15.4\(3\)m4
Cisco IOS=15.4\(3\)m5
Cisco IOS=15.4\(3\)m6
Cisco IOS=15.4\(3\)m6a
Cisco IOS=15.4\(3\)m7
Cisco IOS=15.5\(1\)sy
Cisco IOS=15.5\(1\)t
Cisco IOS=15.5\(1\)t1
Cisco IOS=15.5\(1\)t2
Cisco IOS=15.5\(1\)t3
Cisco IOS=15.5\(1\)t4
Cisco IOS=15.5\(2\)t
Cisco IOS=15.5\(2\)t1
Cisco IOS=15.5\(2\)t2
Cisco IOS=15.5\(2\)t3
Cisco IOS=15.5\(2\)t4
Cisco IOS=15.5\(3\)m0a
Cisco IOS=15.5\(3\)m1
Cisco IOS=15.5\(3\)m2
Cisco IOS=15.5\(3\)m3
Cisco IOS=15.5\(3\)m4
Cisco IOS=15.5\(3\)m4a
Cisco IOS=15.5\(3\)m5
Cisco IOS=15.5\(3\)m6
Cisco IOS=15.6\(1\)t
Cisco IOS=15.6\(1\)t0a
Cisco IOS=15.6\(1\)t1
Cisco IOS=15.6\(1\)t2
Cisco IOS=15.6\(2\)t
Cisco IOS=15.6\(2\)t1
Cisco IOS=15.6\(2\)t2
Cisco IOS=15.6\(3\)m
Cisco IOS=15.6\(3\)m0a
Cisco IOS=15.6\(3\)m1
Cisco IOS=15.6\(3\)m1b
Cisco IOS=15.6\(3\)m2
Cisco IOS=15.6\(3\)m2a
Cisco IOS=15.6\(3\)m3
Cisco IOS and IOS XE Software
Cisco IOS>=12.0<=12.4
Cisco IOS>=15.0<=15.6
Cisco IOS XE>=2.2.0<=3.17.0

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203