EXPOSURES › CVE-2017-6740
CVE-2017-6740
HIGH ⌖ ON CISA KEV · EXPLOITEDAn authenticated remote attacker could execute code on Cisco IOS and IOS XE devices via an SNMP vulnerability.
Cisco IOS and IOS XE software contained an SNMP remote code execution vulnerability allowing authenticated attackers to execute arbitrary code or reload the system. DIB organizations must ensure continuous patching and strict SNMP access controls, as this vulnerability was actively exploited in the wild and represents a systemic failure in input validation across Cisco networking infrastructure.
Shame score — A high-severity RCE in foundational networking software that was actively exploited in the wild, indicating systemic input validation failures and a failure to patch known vulnerabilities promptly.
▸ RECOMMENDED ACTION Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.
| PRODUCT | STATUS |
|---|---|
| AppDynamics GovAPM AppDynamics (a Cisco company) |
Authorized |
| Cisco Cloudlock for Government Cisco Systems Inc. |
Authorized |
| Cisco Meraki for Government Cisco Systems Inc. |
In Process |
| Cisco SD-WAN for Government Cisco Systems Inc. |
In Process |
| Cisco Umbrella for Government Cisco Systems Inc. |
In Process |
| Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government) Cisco Systems Inc. |
Authorized |
| Duo Federal Duo Security (A Cisco Company) |
Authorized |
| WebEx Contact Center Enterprise for Government (WxCCE-G) Cisco Systems Inc. |
In Process |
| Webex for Government Cisco Systems Inc. |
Authorized |