CVE-2017-6738 | Cisco IOS and IOS XE Software - SNMP Subsystem Operational Intel

Executive Risk Summary

"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6."

Anticipated Attack Path

1. Step 1: Attacker sends a crafted SNMP packet to the affected system
2. Step 2: Buffer overflow condition in the SNMP subsystem is triggered
3. Step 3: Attacker gains control of the affected system or causes it to reload

Am I Vulnerable?

Technical check 1: Verify if SNMP is enabled on the affected system
Technical check 2: Check if the affected system has the latest software patch
Technical check 3: Validate if the SNMP community string or user credentials are secure

Operational Audit Arsenal

Target Type Network Device

Target Asset snmpd

Standard Path Cisco IOS and IOS XE Software

Manual Verification Required

This is a non-Windows asset (Cisco). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.