Fixed Intel

CISA Known Exploited Vulnerability

This vulnerability is actively exploited in the wild and listed in the CISA Known Exploited Vulnerabilities catalog.

Remediation Deadline: Mar 24, 2022

CVE-2017-6744

High
EPSS 19.0%CISA KEV
Cisco/IOS software

Description

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 1 contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6.

EPSS — Exploit Probability

19.0%

Higher than 95.2% of all CVEs

Required Action

https://nvd.nist.gov/vuln/detail/CVE-2017-6744

Risk Assessment

ELEVATED
In CISA KEV

Details

Severity
High
EPSS
19.0%
CISA KEV
Yes
Ransomware
Unknown
Articles
0

Timeline

Published

Mar 3, 2022

Added to KEV

Mar 3, 2022

Remediation Due

Mar 24, 2022

Affected Product

Cisco

IOS software

View all Cisco CVEs