CVE-2017-6737

State: Published
Severity: 8.8 High
Published: Jul 17, 2017
Updated: Oct 21, 2025
Reserved: Mar 9, 2017

Description

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. 

The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.

Only traffic directed to the affected system can be used to exploit this vulnerability.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	cisco

Weaknesses

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

Product	Versions
IOSCisco	12.1(3)XIAffected 12.2(4)BAffected 12.2(15)BAffected 12.2(16)B1Affected 12.2(4)B7Affected 12.2(4)B2Affected 12.2(16)B2Affected 12.2(4)B6Affected 12.2(4)B1Affected 12.2(4)B4Affected 12.2(4)B3Affected 12.2(4)B8Affected 12.2(4)B5Affected 12.2(16)BAffected 12.2(2)XAAffected 12.2(2)XA2Affected 12.2(2)XA3Affected 12.2(2)XA4Affected 12.2(2)XA5Affected 12.2(2)XA1Affected 12.2(2)XB11Affected 12.2(2)XB5Affected 12.2(2)XB2Affected 12.2(2)XB1Affected 12.2(2)XB10Affected and 917 more versions

Product

Versions

IOSCisco

12.1(3)XIAffected
12.2(4)BAffected
12.2(15)BAffected
12.2(16)B1Affected
12.2(4)B7Affected
12.2(4)B2Affected
12.2(16)B2Affected
12.2(4)B6Affected
12.2(4)B1Affected
12.2(4)B4Affected
12.2(4)B3Affected
12.2(4)B8Affected
12.2(4)B5Affected
12.2(16)BAffected
12.2(2)XAAffected
12.2(2)XA2Affected
12.2(2)XA3Affected
12.2(2)XA4Affected
12.2(2)XA5Affected
12.2(2)XA1Affected
12.2(2)XB11Affected
12.2(2)XB5Affected
12.2(2)XB2Affected
12.2(2)XB1Affected
12.2(2)XB10Affected
and 917 more versions

References

cisco-sa-20170629-snmp
99345vdb-entry
1038808vdb-entry
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6737government-resource

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.