CVE-2017-6738
Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability
Published Jul 17, 2017 · corrected/updated Jun 16, 2026 · cisco ios · evidence confidence very high
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload. Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. There are workarounds that address these vulnerabilities.
Grounded briefings
Catalog interpretations for three audiences. Each brief cites ingested metadata and the original advisories below. They are not independent research and they do not invent exploit steps.
Executive
CVE-2017-6738 is a high public vulnerability record for cisco ios. CISA lists it as known exploited. Published remediation guidance: Apply updates per vendor instructions. This summary is a catalog interpretation of the ingested metadata and cites the original advisories below.
System administrator
Identify whether cisco ios is in your estate, then compare installed versions with the affected ranges. Affected packages or ranges on record: cisco/ios; cisco/ios xe; Cisco IOS and IOS XE Software. Published remediation guidance: Apply updates per vendor instructions. Prefer the vendor or distribution advisory linked in Sources before changing production systems. This is a catalog interpretation, not a runbook.
Security analyst
Signals on file: CVSS 8.8, EPSS 10.9%. CISA lists it as known exploited. Weakness classes: CWE-119. Sources contributing to this record: cisa_kev, cve_org, epss, nvd. Public exploit references, when present, are outbound links only and are not proof of active exploitation. This is a catalog interpretation of stored metadata.
Exploitation and remediation
Exploitation evidence
Confirmed in CISA KEV since Mar 3, 2022. Listed in the CISA Known Exploited Vulnerabilities catalog.
Patch and remediation
Apply updates per vendor instructions. CISA due date Mar 24, 2022.
Safe detection guidance
Compare installed versions with the affected ranges below and verify the advisory from the original publisher. This site stores metadata and outbound links only; it does not ship exploit code or proof-of-concept payloads.
Technology hubs
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Jul 17, 2017 · Catalog
Detected
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic direct
Mar 3, 2022 · CISA KEV
Known exploited
Apply updates per vendor instructions.
Mar 24, 2022 · CISA KEV
Remediation due
Apply updates per vendor instructions.
Jun 16, 2026 · Catalog
Updated
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic direct
Affected
- cpe cisco/iosversion unspecified
- cpe cisco/ios xeversion unspecified
- vendor Cisco IOS and IOS XE Softwareversion unspecified
Sources
- CISA KEVConfirmed exploitationCVE-2017-6738
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
cisa.gov - CVE.orgVulnerability recordCVE-2017-6738
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2017-6738
30-day exploitation probability 10.9%
first.org - NIST NVDVulnerability recordCVE-2017-6738
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could ex
nvd.nist.gov