All vulnerabilities
CVE-2017-6736

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Cisco IOS and IOS XE SoftwareOperating systems
Open in ThreatlineRecord JSON
CVSS
8.8High
ExploitationExploited in the wildAdded to KEV 3 Mar 2022CISA KEV
Exploit odds (EPSS)70.4%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Federal deadline24 Mar 2022Remediation due date for US federal agenciesCISA KEV
CISA required actionApply updates per vendor instructions. CISA KEV

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 17 Jul 2017, 21:00 UTCPublishedCVE List
  2. 5 Jan 2018Exploit code publicExploit-DB
  3. 3 Mar 2022Added to CISA KEVCISA KEV

Public exploit code and templates 1

  • Remote exploitCisco IOS - Remote Code Execution 5 Jan 2018Exploit-DB

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.

Text from CVE List

Affected versions 31

  • IOSaffected: 12.1(3a)XI9CVE List
  • IOSaffected: 12.1(3)XICVE List
  • IOSaffected: 12.1(3a)XI8CVE List
  • IOSaffected: 12.1(3a)XI3CVE List
  • IOSaffected: 12.1(3a)XI1CVE List
  • IOSaffected: 12.1(3a)XI7CVE List
  • IOSaffected: 12.1(3a)XI6CVE List
  • IOSaffected: 12.1(3a)XI4CVE List
  • IOSaffected: 12.1(3a)XI2CVE List
  • IOSaffected: 12.1(3a)XI5CVE List
  • IOSaffected: 12.0(5)SCVE List
  • IOSaffected: 12.0(11)S6CVE List
  • IOSaffected: 12.0(10)SCVE List
  • IOSaffected: 12.0(11)S5CVE List
  • IOSaffected: 12.0(2)SCVE List
  • IOSaffected: 12.0(4)SCVE List
  • IOSaffected: 12.0(6)S2CVE List
  • IOSaffected: 12.0(7)SCVE List
  • IOSaffected: 12.0(6)SCVE List
  • IOSaffected: 12.0(6)S1CVE List
  • IOSaffected: 12.0(11)S4CVE List
  • IOSaffected: 12.0(10)S1CVE List
  • IOSaffected: 12.0(10)S7CVE List
  • IOSaffected: 12.0(11)S3CVE List
  • IOSaffected: 12.0(14)S4CVE List
  • IOSaffected: 12.0(14)S6CVE List
  • IOSaffected: 12.0(12)S1CVE List
  • IOSaffected: 12.0(15)S2CVE List
  • IOSaffected: 12.0(10)S3CVE List
  • IOSaffected: 12.0(8)SCVE List
  • Universal Productaffected: N/ACVE List

References 6