CVE-2017-6744
Actively exploited. CVE-2017-6744 is listed in the CISA Known Exploited Vulnerabilities catalog (added 2022-03-03) — exploitation has been observed in the wild, and US federal agencies are required to remediate it under BOD 22-01. Treat patching as urgent.
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6.
CSIRTS triage
- What
- The SNMP subsystem of Cisco IOS contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
- Who is affected
- Authenticated users of Cisco IOS Software are affected.
- Urgency
- Remediation is urgent due to the critical nature of the vulnerability and its exploitation status.
- Action
- Apply the latest security patches provided by Cisco.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2017-6744
Get an email if CVE-2017-6744 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Exploitation confirmedAlready exploited in the wild (CISA KEV) — the prediction phase is over. Patch now. Riskier than 94% of all EPSS-scored CVEs.
Advisory coverage (1)
- criticalexploitedCVE-2017-6744: Cisco IOS Software SNMP Remote Code Execution Vulnerabilitycisa-kev · 2022-03-03
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2017-6744)