EXPOSURES › CVE-2017-6739
CVE-2017-6739
HIGH ⌖ ON CISA KEV · EXPLOITEDAn authenticated remote attacker could execute code or reload a Cisco IOS/XE device via an SNMP vulnerability.
Cisco IOS and IOS XE software contained an SNMP remote code execution flaw allowing authenticated attackers to run arbitrary code or reboot devices. DIB organizations must ensure strict SNMP access controls and timely patching, as this vulnerability was actively exploited in the wild and represents a systemic risk in network infrastructure.
Shame score — A high-severity RCE in foundational network infrastructure that was actively exploited in the wild, indicating systemic vulnerability management failures.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |