According to its self-reported version and configuration, the Cisco IOS XE software running on the remote device is affected by multiple remote code execution vulnerabilities in the Simple Network Management Protocol (SNMP) subsystem due to multiple buffer overflow conditions.
An unauthenticated, remote attacker can exploit these vulnerabilities, via a specially crafted SNMP packet, to execute arbitrary code.

To exploit these vulnerabilities via SNMP version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP version 3, the attacker must have user credentials for the affected system.

Detections

Analytics

Cisco IOS XE SNMP Packet Handling Remote Buffer Overflow Multiple RCE (cisco-sa-20170629-snmp)

high Nessus Plugin ID 101269

Version 1.16

Version 1.15

Version 1.14

Version 1.16 May 3, 2024, 9:19 AM Plugin metadata (local -> combined) Plugin Feed: 202405030919
Version 1.15 Apr 25, 2023, 11:11 PM CISA reference Plugin Feed: 202304252311
Version 1.14 Dec 6, 2022, 6:53 AM Reference Plugin Feed: 202212060653