CVE-2017-6738

Summary

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload. Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. There are workarounds that address these vulnerabilities.

Affected Software

VendorProductVersion RangeStatus
CiscoIOS12.2(53)SE1affected
CiscoIOS12.2(55)SEaffected
CiscoIOS12.2(50)SE2affected
CiscoIOS12.2(50)SE1affected
CiscoIOS12.2(50)SE5affected
CiscoIOS12.2(53)SEaffected
CiscoIOS12.2(55)SE3affected
CiscoIOS12.2(55)SE2affected
CiscoIOS12.2(52)SEaffected
CiscoIOS12.2(58)SEaffected
CiscoIOS12.2(50)SE3affected
CiscoIOS12.2(55)SE1affected
CiscoIOS12.2(53)SE2affected
CiscoIOS12.2(52)SE1affected
CiscoIOS12.2(54)SEaffected
CiscoIOS12.2(50)SE4affected
CiscoIOS12.2(50)SEaffected
CiscoIOS12.2(58)SE1affected
CiscoIOS12.2(55)SE4affected
CiscoIOS12.2(58)SE2affected
CiscoIOS12.2(55)SE5affected
CiscoIOS12.2(55)SE6affected
CiscoIOS12.2(55)SE7affected
CiscoIOS12.2(55)SE8affected
CiscoIOS12.2(55)SE9affected
CiscoIOS12.2(55)SE10affected
CiscoIOS12.2(55)SE11affected
CiscoIOS12.2(53)EXaffected
CiscoIOS12.2(52)EXaffected
CiscoIOS12.2(55)EXaffected
CiscoIOS12.2(52)EX1affected
CiscoIOS12.2(55)EX1affected
CiscoIOS12.2(55)EX2affected
CiscoIOS12.2(55)EX3affected
CiscoIOS12.2(58)EXaffected
CiscoIOS12.2(55)EYaffected
CiscoIOS12.2(52)EY1affected
CiscoIOS12.2(52)EYaffected
CiscoIOS12.2(53)EYaffected
CiscoIOS12.2(52)EY2affected
CiscoIOS12.2(52)EY1baffected
CiscoIOS12.2(52)EY1caffected
CiscoIOS12.2(58)EYaffected
CiscoIOS12.2(52)EY3affected
CiscoIOS12.2(52)EY2aaffected
CiscoIOS12.2(58)EY1affected
CiscoIOS12.2(52)EY4affected
CiscoIOS12.2(52)EY3aaffected
CiscoIOS12.2(58)EY2affected
CiscoIOS12.2(58)EZaffected
CiscoIOS12.2(53)EZaffected
CiscoIOS12.2(55)EZaffected
CiscoIOS12.2(60)EZaffected
CiscoIOS12.2(60)EZ1affected
CiscoIOS12.2(60)EZ2affected
CiscoIOS12.2(60)EZ3affected
CiscoIOS12.2(60)EZ4affected
CiscoIOS12.2(60)EZ5affected
CiscoIOS12.2(60)EZ6affected
CiscoIOS12.2(60)EZ7affected
CiscoIOS12.2(60)EZ8affected
CiscoIOS12.2(60)EZ9affected
CiscoIOS12.2(60)EZ10affected
CiscoIOS12.2(60)EZ11affected
CiscoIOS12.2(50)SG3affected
CiscoIOS12.2(53)SGaffected
CiscoIOS12.2(50)SG6affected
CiscoIOS12.2(53)SG1affected
CiscoIOS12.2(53)SG2affected
CiscoIOS12.2(50)SG5affected
CiscoIOS12.2(53)SG3affected
CiscoIOS12.2(50)SG8affected
CiscoIOS12.2(50)SG2affected
CiscoIOS12.2(54)SG1affected
CiscoIOS12.2(50)SG1affected
CiscoIOS12.2(52)SGaffected
CiscoIOS12.2(54)SGaffected
CiscoIOS12.2(50)SGaffected
CiscoIOS12.2(50)SG7affected
CiscoIOS12.2(53)SG4affected
CiscoIOS12.2(50)SG4affected
CiscoIOS12.2(53)SG5affected
CiscoIOS12.2(53)SG6affected
CiscoIOS12.2(53)SG7affected
CiscoIOS12.2(53)SG8affected
CiscoIOS12.2(53)SG9affected
CiscoIOS12.2(53)SG10affected
CiscoIOS12.2(53)SG11affected
CiscoIOS12.2(33)SXIaffected
CiscoIOS12.2(33)SXI1affected
CiscoIOS12.2(52)XOaffected
CiscoIOS12.2(54)XOaffected
CiscoIOS12.2(50)SQ2affected
CiscoIOS12.2(50)SQ1affected
CiscoIOS12.2(50)SQaffected
CiscoIOS12.2(50)SQ3affected
CiscoIOS12.2(50)SQ4affected
CiscoIOS12.2(50)SQ5affected
CiscoIOS12.2(50)SQ6affected
CiscoIOS12.2(50)SQ7affected
CiscoIOS15.0(1)XO1affected
CiscoIOS15.0(1)XOaffected
CiscoIOS15.0(2)XOaffected
CiscoIOS15.3(1)Taffected
CiscoIOS15.3(2)Taffected
CiscoIOS15.3(1)T1affected
CiscoIOS15.3(1)T2affected
CiscoIOS15.3(1)T3affected
CiscoIOS15.3(1)T4affected
CiscoIOS15.3(2)T1affected
CiscoIOS15.3(2)T2affected
CiscoIOS15.3(2)T3affected
CiscoIOS15.3(2)T4affected
CiscoIOS15.0(1)EYaffected
CiscoIOS15.0(1)EY1affected
CiscoIOS15.0(1)EY2affected
CiscoIOS15.0(2)EYaffected
CiscoIOS15.0(2)EY1affected
CiscoIOS15.0(2)EY2affected
CiscoIOS15.0(2)EY3affected
CiscoIOS12.2(54)WOaffected
CiscoIOS15.0(1)SEaffected
CiscoIOS15.0(2)SEaffected
CiscoIOS15.0(1)SE1affected
CiscoIOS15.0(1)SE2affected
CiscoIOS15.0(1)SE3affected
CiscoIOS15.0(2)SE1affected
CiscoIOS15.0(2)SE2affected
CiscoIOS15.0(2)SE3affected
CiscoIOS15.0(2)SE4affected
CiscoIOS15.0(2)SE5affected
CiscoIOS15.0(2)SE6affected
CiscoIOS15.0(2)SE7affected
CiscoIOS15.0(2)SE8affected
CiscoIOS15.0(2)SE9affected
CiscoIOS15.0(2)SE10affected
CiscoIOS15.0(2)SE10aaffected
CiscoIOS15.1(1)SGaffected
CiscoIOS15.1(2)SGaffected
CiscoIOS15.1(1)SG1affected
CiscoIOS15.1(1)SG2affected
CiscoIOS15.1(2)SG1affected
CiscoIOS15.1(2)SG2affected
CiscoIOS15.1(2)SG3affected
CiscoIOS15.1(2)SG4affected
CiscoIOS15.1(2)SG5affected
CiscoIOS15.1(2)SG6affected
CiscoIOS15.1(2)SG7affected
CiscoIOS15.1(2)SG8affected
CiscoIOS15.2(4)Maffected
CiscoIOS15.2(4)M1affected
CiscoIOS15.2(4)M2affected
CiscoIOS15.2(4)M4affected
CiscoIOS15.2(4)M3affected
CiscoIOS15.2(4)M5affected
CiscoIOS15.2(4)M8affected
CiscoIOS15.2(4)M10affected
CiscoIOS15.2(4)M7affected
CiscoIOS15.2(4)M6affected
CiscoIOS15.2(4)M9affected
CiscoIOS15.2(4)M6aaffected
CiscoIOS15.2(4)M11affected
CiscoIOS15.0(2)SGaffected
CiscoIOS15.0(2)SG1affected
CiscoIOS15.0(2)SG2affected
CiscoIOS15.0(2)SG3affected
CiscoIOS15.0(2)SG4affected
CiscoIOS15.0(2)SG5affected
CiscoIOS15.0(2)SG6affected
CiscoIOS15.0(2)SG7affected
CiscoIOS15.0(2)SG8affected
CiscoIOS15.0(2)SG9affected
CiscoIOS15.0(2)SG10affected
CiscoIOS15.0(2)SG11affected
CiscoIOS15.0(2)SG11aaffected
CiscoIOS15.0(1)EXaffected
CiscoIOS15.0(2)EXaffected
CiscoIOS15.0(2)EX1affected
CiscoIOS15.0(2)EX2affected
CiscoIOS15.0(2)EX3affected
CiscoIOS15.0(2)EX4affected
CiscoIOS15.0(2)EX5affected
CiscoIOS15.0(2)EX8affected
CiscoIOS15.0(2a)EX5affected
CiscoIOS15.0(2)EX10affected
CiscoIOS15.0(2)EX11affected
CiscoIOS15.0(2)EX13affected
CiscoIOS15.0(2)EX12affected
CiscoIOS15.2(2)GCaffected
CiscoIOS15.2(3)GCaffected
CiscoIOS15.2(3)GC1affected
CiscoIOS15.2(4)GCaffected
CiscoIOS15.2(4)GC2affected
CiscoIOS15.2(4)GC3affected
CiscoIOS15.4(1)Taffected
CiscoIOS15.4(2)Taffected
CiscoIOS15.4(1)T2affected
CiscoIOS15.4(1)T1affected
CiscoIOS15.4(1)T3affected
CiscoIOS15.4(2)T1affected
CiscoIOS15.4(2)T3affected
CiscoIOS15.4(2)T2affected
CiscoIOS15.4(1)T4affected
CiscoIOS15.4(2)T4affected
CiscoIOS15.0(2)EAaffected
CiscoIOS15.0(2)EA1affected
CiscoIOS15.2(1)Eaffected
CiscoIOS15.2(2)Eaffected
CiscoIOS15.2(1)E1affected
CiscoIOS15.2(3)Eaffected
CiscoIOS15.2(1)E2affected
CiscoIOS15.2(1)E3affected
CiscoIOS15.2(2)E1affected
CiscoIOS15.2(4)Eaffected
CiscoIOS15.2(3)E1affected
CiscoIOS15.2(2)E2affected
CiscoIOS15.2(2a)E1affected
CiscoIOS15.2(2)E3affected
CiscoIOS15.2(2a)E2affected
CiscoIOS15.2(3)E2affected
CiscoIOS15.2(3a)Eaffected
CiscoIOS15.2(3)E3affected
CiscoIOS15.2(4)E1affected
CiscoIOS15.2(2)E4affected
CiscoIOS15.2(2)E5affected
CiscoIOS15.2(4)E2affected
CiscoIOS15.2(3)E4affected
CiscoIOS15.2(5)Eaffected
CiscoIOS15.2(4)E3affected
CiscoIOS15.2(2)E6affected
CiscoIOS15.2(5a)Eaffected
CiscoIOS15.2(5)E1affected
CiscoIOS15.2(5b)Eaffected
CiscoIOS15.2(2)E5aaffected
CiscoIOS15.2(5c)Eaffected
CiscoIOS15.2(2)E5baffected
CiscoIOS15.2(5a)E1affected
CiscoIOS15.2(4)E4affected
CiscoIOS15.2(5)E2affected
CiscoIOS15.3(3)Maffected
CiscoIOS15.3(3)M1affected
CiscoIOS15.3(3)M2affected
CiscoIOS15.3(3)M3affected
CiscoIOS15.3(3)M5affected
CiscoIOS15.3(3)M4affected
CiscoIOS15.3(3)M6affected
CiscoIOS15.3(3)M7affected
CiscoIOS15.3(3)M8affected
CiscoIOS15.3(3)M9affected
CiscoIOS15.3(3)M8aaffected
CiscoIOS15.2(4)JNaffected
CiscoIOS15.0(2)EZaffected
CiscoIOS15.2(1)EYaffected
CiscoIOS15.0(2)EJaffected
CiscoIOS15.0(2)EJ1affected
CiscoIOS15.2(1)SYaffected
CiscoIOS15.2(1)SY1affected
CiscoIOS15.2(1)SY0aaffected
CiscoIOS15.2(1)SY2affected
CiscoIOS15.2(2)SYaffected
CiscoIOS15.2(1)SY1aaffected
CiscoIOS15.2(2)SY1affected
CiscoIOS15.2(2)SY2affected
CiscoIOS15.2(1)SY3affected
CiscoIOS15.2(1)SY4affected
CiscoIOS15.2(5)EXaffected
CiscoIOS15.2(4)JAZ1affected
CiscoIOS15.0(2)EKaffected
CiscoIOS15.0(2)EK1affected
CiscoIOS15.4(1)CGaffected
CiscoIOS15.4(1)CG1affected
CiscoIOS15.4(2)CGaffected
CiscoIOS15.2(2)EBaffected
CiscoIOS15.2(2)EB1affected
CiscoIOS15.2(2)EB2affected
CiscoIOS15.5(1)Taffected
CiscoIOS15.5(1)T1affected
CiscoIOS15.5(2)Taffected
CiscoIOS15.5(1)T2affected
CiscoIOS15.5(1)T3affected
CiscoIOS15.5(2)T1affected
CiscoIOS15.5(2)T2affected
CiscoIOS15.5(2)T3affected
CiscoIOS15.5(2)T4affected
CiscoIOS15.5(1)T4affected
CiscoIOS15.2(2)EAaffected
CiscoIOS15.2(2)EA1affected
CiscoIOS15.2(2)EA2affected
CiscoIOS15.2(3)EAaffected
CiscoIOS15.2(4)EAaffected
CiscoIOS15.2(4)EA1affected
CiscoIOS15.2(2)EA3affected
CiscoIOS15.2(4)EA3affected
CiscoIOS15.2(5)EAaffected
CiscoIOS15.2(4)EA4affected
CiscoIOS15.2(4)EA5affected
CiscoIOS15.5(3)Maffected
CiscoIOS15.5(3)M1affected
CiscoIOS15.5(3)M0aaffected
CiscoIOS15.5(3)M2affected
CiscoIOS15.5(3)M3affected
CiscoIOS15.5(3)M4affected
CiscoIOS15.5(3)M4aaffected
CiscoIOS15.5(3)M5affected
CiscoIOS15.3(3)JAA1affected
CiscoIOS15.0(2)SQDaffected
CiscoIOS15.0(2)SQD1affected
CiscoIOS15.0(2)SQD2affected
CiscoIOS15.0(2)SQD3affected
CiscoIOS15.0(2)SQD4affected
CiscoIOS15.0(2)SQD5affected
CiscoIOS15.0(2)SQD6affected
CiscoIOS15.6(1)Taffected
CiscoIOS15.6(2)Taffected
CiscoIOS15.6(1)T0aaffected
CiscoIOS15.6(1)T1affected
CiscoIOS15.6(2)T1affected
CiscoIOS15.6(1)T2affected
CiscoIOS15.6(2)T2affected
CiscoIOS15.6(1)T3affected
CiscoIOS15.3(1)SYaffected
CiscoIOS15.3(1)SY1affected
CiscoIOS15.3(1)SY2affected
CiscoIOS15.6(3)Maffected
CiscoIOS15.6(3)M1affected
CiscoIOS15.6(3)M0aaffected
CiscoIOS15.6(3)M1baffected
CiscoIOS15.6(3)M2affected
CiscoIOS15.6(3)M2aaffected
CiscoIOS15.2(4)EC1affected
CiscoIOS15.2(4)EC2affected
CiscoIOS15.3(3)JPC5affected
CiscoIOS15.4(1)SYaffected
CiscoIOS15.4(1)SY1affected
CiscoIOS15.4(1)SY2affected
CiscoIOS15.5(1)SYaffected
CiscoIOS15.3(3)JPR1affected
CiscoCisco IOS XE Software3.2.0SGaffected
CiscoCisco IOS XE Software3.2.1SGaffected
CiscoCisco IOS XE Software3.2.2SGaffected
CiscoCisco IOS XE Software3.2.3SGaffected
CiscoCisco IOS XE Software3.2.4SGaffected
CiscoCisco IOS XE Software3.2.5SGaffected
CiscoCisco IOS XE Software3.2.6SGaffected
CiscoCisco IOS XE Software3.2.7SGaffected
CiscoCisco IOS XE Software3.2.8SGaffected
CiscoCisco IOS XE Software3.2.9SGaffected
CiscoCisco IOS XE Software3.2.10SGaffected
CiscoCisco IOS XE Software3.2.11SGaffected
CiscoCisco IOS XE Software3.3.0SGaffected
CiscoCisco IOS XE Software3.3.2SGaffected
CiscoCisco IOS XE Software3.3.1SGaffected
CiscoCisco IOS XE Software3.2.0SEaffected
CiscoCisco IOS XE Software3.2.1SEaffected
CiscoCisco IOS XE Software3.2.2SEaffected
CiscoCisco IOS XE Software3.2.3SEaffected
CiscoCisco IOS XE Software3.3.0SEaffected
CiscoCisco IOS XE Software3.3.1SEaffected
CiscoCisco IOS XE Software3.3.2SEaffected
CiscoCisco IOS XE Software3.3.3SEaffected
CiscoCisco IOS XE Software3.3.4SEaffected
CiscoCisco IOS XE Software3.3.5SEaffected
CiscoCisco IOS XE Software3.4.0SGaffected
CiscoCisco IOS XE Software3.4.2SGaffected
CiscoCisco IOS XE Software3.4.1SGaffected
CiscoCisco IOS XE Software3.4.3SGaffected
CiscoCisco IOS XE Software3.4.4SGaffected
CiscoCisco IOS XE Software3.4.5SGaffected
CiscoCisco IOS XE Software3.4.6SGaffected
CiscoCisco IOS XE Software3.4.7SGaffected
CiscoCisco IOS XE Software3.4.8SGaffected
CiscoCisco IOS XE Software3.5.0Eaffected
CiscoCisco IOS XE Software3.5.1Eaffected
CiscoCisco IOS XE Software3.5.2Eaffected
CiscoCisco IOS XE Software3.5.3Eaffected
CiscoCisco IOS XE Software3.6.0Eaffected
CiscoCisco IOS XE Software3.6.1Eaffected
CiscoCisco IOS XE Software3.6.2aEaffected
CiscoCisco IOS XE Software3.6.2Eaffected
CiscoCisco IOS XE Software3.6.3Eaffected
CiscoCisco IOS XE Software3.6.4Eaffected
CiscoCisco IOS XE Software3.6.5Eaffected
CiscoCisco IOS XE Software3.6.6Eaffected
CiscoCisco IOS XE Software3.6.5aEaffected
CiscoCisco IOS XE Software3.6.5bEaffected
CiscoCisco IOS XE Software3.3.0SQaffected
CiscoCisco IOS XE Software3.3.1SQaffected
CiscoCisco IOS XE Software3.4.0SQaffected
CiscoCisco IOS XE Software3.4.1SQaffected
CiscoCisco IOS XE Software3.7.0Eaffected
CiscoCisco IOS XE Software3.7.1Eaffected
CiscoCisco IOS XE Software3.7.2Eaffected
CiscoCisco IOS XE Software3.7.3Eaffected
CiscoCisco IOS XE Software3.7.4Eaffected
CiscoCisco IOS XE Software3.7.5Eaffected
CiscoCisco IOS XE Software3.5.0SQaffected
CiscoCisco IOS XE Software3.5.1SQaffected
CiscoCisco IOS XE Software3.5.2SQaffected
CiscoCisco IOS XE Software3.5.3SQaffected
CiscoCisco IOS XE Software3.5.4SQaffected
CiscoCisco IOS XE Software3.5.5SQaffected
CiscoCisco IOS XE Software3.5.6SQaffected
CiscoCisco IOS XE Software16.1.1affected
CiscoCisco IOS XE Software16.1.2affected
CiscoCisco IOS XE Software16.1.3affected
CiscoCisco IOS XE Software16.2.1affected
CiscoCisco IOS XE Software16.2.2affected
CiscoCisco IOS XE Software3.8.0Eaffected
CiscoCisco IOS XE Software3.8.1Eaffected
CiscoCisco IOS XE Software3.8.2Eaffected
CiscoCisco IOS XE Software3.8.3Eaffected
CiscoCisco IOS XE Software3.8.4Eaffected
CiscoCisco IOS XE Software16.3.1affected
CiscoCisco IOS XE Software16.3.2affected
CiscoCisco IOS XE Software16.3.3affected
CiscoCisco IOS XE Software16.3.1aaffected
CiscoCisco IOS XE Software16.3.4affected
CiscoCisco IOS XE Software16.4.1affected
CiscoCisco IOS XE Software16.4.2affected
CiscoCisco IOS XE Software16.5.1affected
CiscoCisco IOS XE Software16.5.1aaffected
CiscoCisco IOS XE Software16.5.1baffected
CiscoCisco IOS XE Software3.18.1aSPaffected
CiscoCisco IOS XE Software3.18.2aSPaffected
CiscoCisco IOS XE Software3.9.0Eaffected
CiscoCisco IOS XE Software3.9.1Eaffected
CiscoCisco IOS XE Software3.9.2Eaffected
CiscoCisco IOS XE Software17.11.99SWaffected

Weaknesses

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: active
    • Automatable: no
    • Technical Impact: total

Additional References

References