According to its self-reported version and configuration, the Cisco IOS software running on the remote device is affected by multiple remote code execution vulnerabilities in the Simple Network Management Protocol (SNMP) subsystem due to multiple buffer overflow conditions.
An unauthenticated, remote attacker can exploit these vulnerabilities, via a specially crafted SNMP packet, to execute arbitrary code.

To exploit these vulnerabilities via SNMP version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP version 3, the attacker must have user credentials for the affected system.

Detections

Analytics

Cisco IOS SNMP Packet Handling Remote Buffer Overflow Multiple RCE (cisco-sa-20170629-snmp)

high Nessus Plugin ID 101268

Version 1.19

Version 1.18

Version 1.17

Version 1.16

Version 1.19 Sep 26, 2023, 8:16 PM Detection (Modified flagging.) Plugin Feed: 202309262016
Version 1.18 May 29, 2023, 10:00 AM Detection (Added vulnerable version.) Plugin Feed: 202305291000
Version 1.17 Apr 25, 2023, 11:11 PM CISA reference Plugin Feed: 202304252311
Version 1.16 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653