CVE-2017-6740 — The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload

Back Back to CVE browser

HIGH KEV

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload

Published Jul 17, 2017 ·Due Mar 24, 2022

8.8

HIGH

CVSS 3.1

EPSS 11.10%

Description

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload. Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. There are workarounds that address these vulnerabilities.

Affected products

Vendor Cisco Product IOS Default
n/a
- Version
  12.2(14)ZA
  Status
  affected
  Constraints
  -
- Version
  12.2(14)ZA2
  Status
  affected
  Constraints
  -
- Version
  12.2(14)ZA3
  Status
  affected
  Constraints
  -
- Version
  12.2(14)ZA4
  Status
  affected
  Constraints
  -
- Version
  12.2(14)ZA5
  Status
  affected
  Constraints
  -
- Version
  12.2(14)ZA6
  Status
  affected
  Constraints
  -
- Version
  12.2(14)ZA7
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB1
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB10
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB11
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB11a
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB2
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB3
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB4
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB5
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB6
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB7
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB8
  Status
  affected
  Constraints
  -
- Version
  12.2(17d)SXB9
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SO1
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SO2
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SO3
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF10
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF10a
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF11
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF12
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF12a
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF13
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF14
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF15
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF15a
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF16
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF17
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF17a
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF17b
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF2
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF3
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF4
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF5
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF6
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF7
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF8
  Status
  affected
  Constraints
  -
- Version
  12.2(18)SXF9
  Status
  affected
  Constraints
  -
- Version
  12.2(25)SE2
  Status
  affected
  Constraints
  -
- Version
  12.2(28)ZX
  Status
  affected
  Constraints
  -
- Version
  12.2(29)SV2
  Status
  affected
  Constraints
  -
- Version
  12.2(33)STE0
  Status
  affected
  Constraints
  -
- Version
  15.0(1)EX
  Status
  affected
  Constraints
  -
- Version
  15.0(1)XO
  Status
  affected
  Constraints
  -
- Version
  15.0(1)XO1
  Status
  affected
  Constraints
  -
- Version
  15.0(2)EX10
  Status
  affected
  Constraints
  -
- Version
  15.0(2)EX11
  Status
  affected
  Constraints
  -
- Version
  15.0(2)EX12
  Status
  affected
  Constraints
  -
- Version
  15.0(2)EX13
  Status
  affected
  Constraints
  -
- Version
  15.0(2)EX2
  Status
  affected
  Constraints
  -
- Version
  15.0(2)EX8
  Status
  affected
  Constraints
  -
- Version
  15.0(2)SG11a
  Status
  affected
  Constraints
  -
- Version
  15.0(2)XO
  Status
  affected
  Constraints
  -
- Version
  15.1(2)SY9
  Status
  affected
  Constraints
  -
- Version
  15.1(3)MRA3
  Status
  affected
  Constraints
  -
- Version
  15.1(3)MRA4
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVB1
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVB2
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVD
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVD1
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVD2
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVE
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVF
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVF1
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVG
  Status
  affected
  Constraints
  -
- Version
  15.1(3)SVJ2
  Status
  affected
  Constraints
  -
Vendor IntelliShield Product Universal Product Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cisco

IOS

n/a

Version	Status	Constraints
12.2(14)ZA	affected	-
12.2(14)ZA2	affected	-
12.2(14)ZA3	affected	-
12.2(14)ZA4	affected	-
12.2(14)ZA5	affected	-
12.2(14)ZA6	affected	-
12.2(14)ZA7	affected	-
12.2(17d)SXB1	affected	-
12.2(17d)SXB10	affected	-
12.2(17d)SXB11	affected	-
12.2(17d)SXB11a	affected	-
12.2(17d)SXB2	affected	-
12.2(17d)SXB3	affected	-
12.2(17d)SXB4	affected	-
12.2(17d)SXB5	affected	-
12.2(17d)SXB6	affected	-
12.2(17d)SXB7	affected	-
12.2(17d)SXB8	affected	-
12.2(17d)SXB9	affected	-
12.2(18)SO1	affected	-
12.2(18)SO2	affected	-
12.2(18)SO3	affected	-
12.2(18)SXF	affected	-
12.2(18)SXF10	affected	-
12.2(18)SXF10a	affected	-
12.2(18)SXF11	affected	-
12.2(18)SXF12	affected	-
12.2(18)SXF12a	affected	-
12.2(18)SXF13	affected	-
12.2(18)SXF14	affected	-
12.2(18)SXF15	affected	-
12.2(18)SXF15a	affected	-
12.2(18)SXF16	affected	-
12.2(18)SXF17	affected	-
12.2(18)SXF17a	affected	-
12.2(18)SXF17b	affected	-
12.2(18)SXF2	affected	-
12.2(18)SXF3	affected	-
12.2(18)SXF4	affected	-
12.2(18)SXF5	affected	-
12.2(18)SXF6	affected	-
12.2(18)SXF7	affected	-
12.2(18)SXF8	affected	-
12.2(18)SXF9	affected	-
12.2(25)SE2	affected	-
12.2(28)ZX	affected	-
12.2(29)SV2	affected	-
12.2(33)STE0	affected	-
15.0(1)EX	affected	-
15.0(1)XO	affected	-
15.0(1)XO1	affected	-
15.0(2)EX10	affected	-
15.0(2)EX11	affected	-
15.0(2)EX12	affected	-
15.0(2)EX13	affected	-
15.0(2)EX2	affected	-
15.0(2)EX8	affected	-
15.0(2)SG11a	affected	-
15.0(2)XO	affected	-
15.1(2)SY9	affected	-
15.1(3)MRA3	affected	-
15.1(3)MRA4	affected	-
15.1(3)SVB1	affected	-
15.1(3)SVB2	affected	-
15.1(3)SVD	affected	-
15.1(3)SVD1	affected	-
15.1(3)SVD2	affected	-
15.1(3)SVE	affected	-
15.1(3)SVF	affected	-
15.1(3)SVF1	affected	-
15.1(3)SVG	affected	-
15.1(3)SVJ2	affected	-

IntelliShield

Universal Product

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Metrics

11.10% 0.11100

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.

EPSS probability 0.11100

Score over time

2021–2026

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v1
EPSS v2
EPSS v3
EPSS v4
EPSS v5

Table of values (34 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 1, 2026	11.10% (0.11100)	95.80th	v5 (v2026.06.15)
Jun 15, 2026	10.79% (0.10788)	95.26th	v5 (v2026.06.15)
May 31, 2026	16.05% (0.16051)	94.90th	v4 (v2025.03.14)
Apr 19, 2026	10.03% (0.10034)	93.08th	v4 (v2025.03.14)
Apr 18, 2026	19.70% (0.19700)	95.44th	v4 (v2025.03.14)
Mar 20, 2026	29.19% (0.29190)	96.53th	v4 (v2025.03.14)
Dec 27, 2025	24.27% (0.24270)	95.92th	v4 (v2025.03.14)
Dec 26, 2025	18.54% (0.18541)	95.04th	v4 (v2025.03.14)
Nov 21, 2025	14.31% (0.14309)	94.13th	v4 (v2025.03.14)
Nov 18, 2025	4.46% (0.04465)	87.98th	v4 (v2025.03.14)
Sep 25, 2025	14.31% (0.14309)	94.19th	v4 (v2025.03.14)
Aug 16, 2025	11.33% (0.11326)	93.26th	v4 (v2025.03.14)
Aug 1, 2025	12.56% (0.12558)	93.71th	v4 (v2025.03.14)
Jun 26, 2025	16.73% (0.16733)	94.60th	v4 (v2025.03.14)
Mar 30, 2025	13.04% (0.13038)	93.47th	v4 (v2025.03.14)
Mar 29, 2025	37.46% (0.37463)	95.71th	v4 (v2025.03.14)
Mar 17, 2025	13.04% (0.13038)	93.54th	v4 (v2025.03.14)
Dec 17, 2024	5.22% (0.05216)	92.90th	v3 (v2023.03.01)
Jul 17, 2024	1.90% (0.01900)	88.69th	v3 (v2023.03.01)
May 7, 2024	1.59% (0.01589)	87.28th	v3 (v2023.03.01)
Mar 29, 2024	1.13% (0.01126)	84.34th	v3 (v2023.03.01)
Sep 12, 2023	0.80% (0.00796)	79.48th	v3 (v2023.03.01)
Jun 27, 2023	0.93% (0.00932)	80.81th	v3 (v2023.03.01)
May 27, 2023	0.91% (0.00909)	80.53th	v3 (v2023.03.01)
Apr 2, 2023	0.94% (0.00939)	80.73th	v3 (v2023.03.01)
Mar 7, 2023	0.66% (0.00663)	76.50th	v3 (v2023.03.01)
Mar 6, 2023	4.70% (0.04695)	89.17th	v2 (v2022.01.01)
Apr 13, 2022	4.70% (0.04695)	88.11th	v2 (v2022.01.01)
Apr 1, 2022	4.57% (0.04571)	87.83th	v2 (v2022.01.01)
Feb 4, 2022	4.57% (0.04571)	74.15th	v2 (v2022.01.01)
Feb 3, 2022	1.83% (0.01828)	35.38th	v1
Jan 6, 2022	1.83% (0.01828)	34.69th	v1
Sep 1, 2021	1.83% (0.01828)	74.99th	v1
Apr 14, 2021	1.83% (0.01828)	0.00th	v1

Weaknesses (1)

CWE-119

Buffer Overflow

References (5)

http://www.securityfocus.com/bid/99345
Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038808
Broken LinkThird Party AdvisoryVDB Entry
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
US Government Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6740
government-resourceUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/99345		Broken LinkThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1038808		Broken LinkThird Party AdvisoryVDB Entry
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp		US Government Resource
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp		Vendor Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6740		government-resourceUS Government Resource