Riskcovery

CVE-2017-6741

State
Published
Severity
8.8 High
Published
Jul 17, 2017
Updated
Jul 31, 2025
Reserved
Mar 9, 2017

Read the record on cve.org

Description

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. 

The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.

Only traffic directed to the affected system can be used to exploit this vulnerability.

Scores

CVSSScoreVectorSource
3.08.8 HighCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hcisco

Weaknesses

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Affected Products

ProductVersions
Cisco IOS XE SoftwareCisco
  • 3.7.0SAffected
  • 3.7.1SAffected
  • 3.7.2SAffected
  • 3.7.3SAffected
  • 3.7.4SAffected
  • 3.7.5SAffected
  • 3.7.6SAffected
  • 3.7.7SAffected
  • 3.7.4aSAffected
  • 3.7.2tSAffected
  • 3.7.0bSAffected
  • 3.8.0SAffected
  • 3.8.1SAffected
  • 3.8.2SAffected
  • 3.9.1SAffected
  • 3.9.0SAffected
  • 3.9.2SAffected
  • 3.9.0aSAffected
  • 3.11.1SAffected
  • 3.11.2SAffected
  • 3.11.0SAffected
  • 3.11.3SAffected
  • 3.11.4SAffected
  • 3.12.0SAffected
  • 3.12.1SAffected
  • and 63 more versions
Universal ProductIntelliShield
  • N/AAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.