CVE-2017-6739

HIGH

8.8

CVSS Score

Published: July 17, 2017 at 09:00 PM UTC

Updated: June 17, 2026 at 01:22 AM UTC

2 products affected across 1 vendorIOSIOS Xe

Using Universal Product by IntelliShield?

Get instant alerts when new vulnerabilities affect Universal Product - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploitation

CISA KEV

Exploit prediction

EPSS 11%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score10.9%

EPSS (Exploit Prediction Scoring System) estimates a 10.9% chance this CVE is exploited in the wild within the next 30 days — higher than 96% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

Required Action

Apply updates per vendor instructions.

Ransomware Use

Unknown

Added to KEV

Mar 3, 2022

Remediation Due

Mar 24, 2022

1678 days overdue

Notes

https://nvd.nist.gov/vuln/detail/CVE-2017-6739

Description

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.  The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.