Skip to content
COOEY

EXPOSURES › CVE-2017-6739

CVE-2017-6739

HIGH ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2022-03-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2017-6739 ↗
⚡ RCE ⌖ EXPLOITED IN THE WILD SHAME 78/100 rceexploited-in-wildunpatched

An authenticated remote attacker could execute code or reload a Cisco IOS/XE device via an SNMP vulnerability.

Cisco IOS and IOS XE software contained an SNMP remote code execution flaw allowing authenticated attackers to run arbitrary code or reboot devices. DIB organizations must ensure strict SNMP access controls and timely patching, as this vulnerability was actively exploited in the wild and represents a systemic risk in network infrastructure.

Shame score — A high-severity RCE in foundational network infrastructure that was actively exploited in the wild, indicating systemic vulnerability management failures.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
Cisco Systems Inc. · vendorIOS and IOS XE · product
DESCRIPTION

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
Cisco's SNMP RCE vulnerability (CVE-2017-6739) represents a severe, long-standing flaw in a foundational network protocol implementation, allowing remote code execution and system reloads. The vendor'
cooey ↗ severe-fallout -0.80
NVD confirms the severity of the SNMP RCE flaw, highlighting the critical risk of remote code execution and system compromise, which underscores the vendor's failure to adequately protect its products
"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload."
sec.cloudapps.cisco.com ↗ severe-fallout -0.50
Cisco's hardening advisory for ISE in 2026 indicates ongoing security issues, but does not directly address CVE-2017-6739, suggesting a pattern of delayed or insufficient patching for critical flaws.
"Cisco Identity Services Engine Hardening Release: September 2026"
black-hat.co.uk ↗ severe-fallout -0.30
Hazard's list of exploited vulnerabilities includes Cisco products, implying that flaws like CVE-2017-6739 may have been exploited in the wild, reflecting poorly on Cisco's proactive security posture.
"CVE-2026-76460 Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability Cisco · Identity Services Engine Confirmed exploited CVSS 10"
recentbreaches.com ↗ severe-fallout +0.00
Irrelevant to CVE-2017-6739; focuses on unrelated 2026 data breaches and ransomware, offering no insight into Cisco's handling of the SNMP vulnerability.
talosintelligence.com ↗ severe-fallout +0.00
Talos Intelligence page lacks specific commentary on CVE-2017-6739, providing no direct sentiment toward Cisco's handling of the vulnerability.
app.opencve.io ↗ severe-fallout +0.00
OpenCVE database entry is unrelated to CVE-2017-6739, focusing on a 2026 Oracle vulnerability, and thus offers no sentiment toward Cisco.
AFFECTED FEDRAMP PRODUCTS · 9
PRODUCTSTATUS
AppDynamics GovAPM
AppDynamics (a Cisco company)
 Authorized
Cisco Cloudlock for Government
Cisco Systems Inc.
 Authorized
Cisco Meraki for Government
Cisco Systems Inc.
 In Process
Cisco SD-WAN for Government
Cisco Systems Inc.
 In Process
Cisco Umbrella for Government
Cisco Systems Inc.
 In Process
Cisco Unified Communications Manager Cloud for Government (Cisco UCM Cloud for Government)
Cisco Systems Inc.
 Authorized
Duo Federal
Duo Security (A Cisco Company)
 Authorized
WebEx Contact Center Enterprise for Government (WxCCE-G)
Cisco Systems Inc.
 In Process
Webex for Government
Cisco Systems Inc.
 Authorized