CVE-2017-6744

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload. Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. There are workarounds that address these vulnerabilities.

• CWE-119
• CWE-119

• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmpVendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmpVendor Advisory
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6744US Government Resource

Published

Jul 17, 2017

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6738The Simple Network Management Protocol (SNMP) subsystem of C…8.8
• CVE-2017-6739A vulnerability in the SNMP implementation of could allow an…8.8
• CVE-2017-6740The Simple Network Management Protocol (SNMP) subsystem of C…8.8
• CVE-2017-6741A vulnerability in the SNMP implementation of could allow an…8.8
• CVE-2017-6742A vulnerability in the SNMP implementation of could allow an…8.8
• CVE-2017-6743The Simple Network Management Protocol (SNMP) subsystem of C…8.8
• CVE-2017-6745A vulnerability in the cache server within Cisco Videoscape …
• CVE-2017-6746A vulnerability in the web interface of the Cisco Web Securi…
• CVE-2017-6747A vulnerability in the authentication module of Cisco Identi…
• CVE-2017-6748A vulnerability in the CLI parser of the Cisco Web Security …
• CVE-2017-6749A vulnerability in the web-based management interface of Cis…
• CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Applia…