Remote Code Execution Risk in Cisco IOS SNMP Subsystem

CVE-2017-6741

What is CVE-2017-6741?

The SNMP subsystem within Cisco IOS and IOS XE software versions contains multiple vulnerabilities that could enable an authenticated remote attacker to execute arbitrary code or cause a reload of the affected system. This can occur through specially crafted SNMP packets sent to the target system. The vulnerabilities arise from a buffer overflow condition present in the SNMP service across all supported versions of SNMP: Versions 1, 2c, and 3. Exploits requiring SNMP Version 2c or earlier necessitate the attacker knowing the SNMP read-only community string, while those using SNMP Version 3 require valid user credentials. Any devices with SNMP enabled and without explicit exclusions for affected MIBs or OIDs are considered at-risk.

References