Cisco Simple Network Management Protocol (SNMP) Buffer Overflow Vulnerabilities

Abstract: Various Cisco product lines are affected by buffer overflow vulnerabilities in the underlying SNMP platform. According to Cisco, these vulnerabilities can allow attackers with knowledge of community strings or passwords to gain remote code execution on routers or conduct denial of service attacks.  Vulnerabilities are exploitable if SNMP is enabled and authentication is successful.  To ensure a Cisco router is not at risk, MIBs and software versions need to be immediately checked for a wide range of affected products. The MIB whitelisting mitigation actions listed in this IAA should be implemented regardless of platform and operating system version.

Date Published:

Last Reviewed: 30 June 2017

Dissemination Control: N/A

Tags: Advisory; Cisco; Simple Network Management Protocol (SNMP); Vulnerability