CVE-2017-6743

An authenticated remote attacker could execute code via the SNMP subsystem in Cisco IOS and IOS XE software.

Cisco IOS and IOS XE software contained a remote code execution vulnerability in its SNMP subsystem, allowing an authenticated remote attacker to execute arbitrary code. This failure is critical for DIB organizations because it enables remote compromise of network infrastructure, violates CMMC/NIST 800-171 requirements for patching known vulnerabilities, and exposes sensitive data to theft or manipulation. Organizations must ensure all Cisco network devices are patched to the latest versions and restrict SNMP access to trusted, authenticated sources only.

Shame score — A high-severity RCE vulnerability in foundational network infrastructure that was actively exploited in the wild (KEV) demonstrates systemic negligence in patching and input validation, leading to potential mass compromise of enterprise networks.