CVE-2017-6738 (GCVE-0-2017-6738)

Vulnerability from cvelistv5 – Published: 2017-07-17 21:00 – Updated: 2025-10-21 23:55
VLAI? CISA
Summary
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload. Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. There are workarounds that address these vulnerabilities.
CWE
  • CWE-119 - Improper Restriction of Operations within the Bounds of a Memory Buffer
Assigner
Impacted products
Vendor Product Version
Cisco IOS Affected: 12.2(53)SE1
Affected: 12.2(55)SE
Affected: 12.2(50)SE2
Affected: 12.2(50)SE1
Affected: 12.2(50)SE5
Affected: 12.2(53)SE
Affected: 12.2(55)SE3
Affected: 12.2(55)SE2
Affected: 12.2(52)SE
Affected: 12.2(58)SE
Affected: 12.2(50)SE3
Affected: 12.2(55)SE1
Affected: 12.2(53)SE2
Affected: 12.2(52)SE1
Affected: 12.2(54)SE
Affected: 12.2(50)SE4
Affected: 12.2(50)SE
Affected: 12.2(58)SE1
Affected: 12.2(55)SE4
Affected: 12.2(58)SE2
Affected: 12.2(55)SE5
Affected: 12.2(55)SE6
Affected: 12.2(55)SE7
Affected: 12.2(55)SE8
Affected: 12.2(55)SE9
Affected: 12.2(55)SE10
Affected: 12.2(55)SE11
Affected: 12.2(53)EX
Affected: 12.2(52)EX
Affected: 12.2(55)EX
Affected: 12.2(52)EX1
Affected: 12.2(55)EX1
Affected: 12.2(55)EX2
Affected: 12.2(55)EX3
Affected: 12.2(58)EX
Affected: 12.2(55)EY
Affected: 12.2(52)EY1
Affected: 12.2(52)EY
Affected: 12.2(53)EY
Affected: 12.2(52)EY2
Affected: 12.2(52)EY1b
Affected: 12.2(52)EY1c
Affected: 12.2(58)EY
Affected: 12.2(52)EY3
Affected: 12.2(52)EY2a
Affected: 12.2(58)EY1
Affected: 12.2(52)EY4
Affected: 12.2(52)EY3a
Affected: 12.2(58)EY2
Affected: 12.2(58)EZ
Affected: 12.2(53)EZ
Affected: 12.2(55)EZ
Affected: 12.2(60)EZ
Affected: 12.2(60)EZ1
Affected: 12.2(60)EZ2
Affected: 12.2(60)EZ3
Affected: 12.2(60)EZ4
Affected: 12.2(60)EZ5
Affected: 12.2(60)EZ6
Affected: 12.2(60)EZ7
Affected: 12.2(60)EZ8
Affected: 12.2(60)EZ9
Affected: 12.2(60)EZ10
Affected: 12.2(60)EZ11
Affected: 12.2(50)SG3
Affected: 12.2(53)SG
Affected: 12.2(50)SG6
Affected: 12.2(53)SG1
Affected: 12.2(53)SG2
Affected: 12.2(50)SG5
Affected: 12.2(53)SG3
Affected: 12.2(50)SG8
Affected: 12.2(50)SG2
Affected: 12.2(54)SG1
Affected: 12.2(50)SG1
Affected: 12.2(52)SG
Affected: 12.2(54)SG
Affected: 12.2(50)SG
Affected: 12.2(50)SG7
Affected: 12.2(53)SG4
Affected: 12.2(50)SG4
Affected: 12.2(53)SG5
Affected: 12.2(53)SG6
Affected: 12.2(53)SG7
Affected: 12.2(53)SG8
Affected: 12.2(53)SG9
Affected: 12.2(53)SG10
Affected: 12.2(53)SG11
Affected: 12.2(33)SXI
Affected: 12.2(33)SXI1
Affected: 12.2(52)XO
Affected: 12.2(54)XO
Affected: 12.2(50)SQ2
Affected: 12.2(50)SQ1
Affected: 12.2(50)SQ
Affected: 12.2(50)SQ3
Affected: 12.2(50)SQ4
Affected: 12.2(50)SQ5
Affected: 12.2(50)SQ6
Affected: 12.2(50)SQ7
Affected: 15.0(1)XO1
Affected: 15.0(1)XO
Affected: 15.0(2)XO
Affected: 15.3(1)T
Affected: 15.3(2)T
Affected: 15.3(1)T1
Affected: 15.3(1)T2
Affected: 15.3(1)T3
Affected: 15.3(1)T4
Affected: 15.3(2)T1
Affected: 15.3(2)T2
Affected: 15.3(2)T3
Affected: 15.3(2)T4
Affected: 15.0(1)EY
Affected: 15.0(1)EY1
Affected: 15.0(1)EY2
Affected: 15.0(2)EY
Affected: 15.0(2)EY1
Affected: 15.0(2)EY2
Affected: 15.0(2)EY3
Affected: 12.2(54)WO
Affected: 15.0(1)SE
Affected: 15.0(2)SE
Affected: 15.0(1)SE1
Affected: 15.0(1)SE2
Affected: 15.0(1)SE3
Affected: 15.0(2)SE1
Affected: 15.0(2)SE2
Affected: 15.0(2)SE3
Affected: 15.0(2)SE4
Affected: 15.0(2)SE5
Affected: 15.0(2)SE6
Affected: 15.0(2)SE7
Affected: 15.0(2)SE8
Affected: 15.0(2)SE9
Affected: 15.0(2)SE10
Affected: 15.0(2)SE10a
Affected: 15.1(1)SG
Affected: 15.1(2)SG
Affected: 15.1(1)SG1
Affected: 15.1(1)SG2
Affected: 15.1(2)SG1
Affected: 15.1(2)SG2
Affected: 15.1(2)SG3
Affected: 15.1(2)SG4
Affected: 15.1(2)SG5
Affected: 15.1(2)SG6
Affected: 15.1(2)SG7
Affected: 15.1(2)SG8
Affected: 15.2(4)M
Affected: 15.2(4)M1
Affected: 15.2(4)M2
Affected: 15.2(4)M4
Affected: 15.2(4)M3
Affected: 15.2(4)M5
Affected: 15.2(4)M8
Affected: 15.2(4)M10
Affected: 15.2(4)M7
Affected: 15.2(4)M6
Affected: 15.2(4)M9
Affected: 15.2(4)M6a
Affected: 15.2(4)M11
Affected: 15.0(2)SG
Affected: 15.0(2)SG1
Affected: 15.0(2)SG2
Affected: 15.0(2)SG3
Affected: 15.0(2)SG4
Affected: 15.0(2)SG5
Affected: 15.0(2)SG6
Affected: 15.0(2)SG7
Affected: 15.0(2)SG8
Affected: 15.0(2)SG9
Affected: 15.0(2)SG10
Affected: 15.0(2)SG11
Affected: 15.0(2)SG11a
Affected: 15.0(1)EX
Affected: 15.0(2)EX
Affected: 15.0(2)EX1
Affected: 15.0(2)EX2
Affected: 15.0(2)EX3
Affected: 15.0(2)EX4
Affected: 15.0(2)EX5
Affected: 15.0(2)EX8
Affected: 15.0(2a)EX5
Affected: 15.0(2)EX10
Affected: 15.0(2)EX11
Affected: 15.0(2)EX13
Affected: 15.0(2)EX12
Affected: 15.2(2)GC
Affected: 15.2(3)GC
Affected: 15.2(3)GC1
Affected: 15.2(4)GC
Affected: 15.2(4)GC2
Affected: 15.2(4)GC3
Affected: 15.4(1)T
Affected: 15.4(2)T
Affected: 15.4(1)T2
Affected: 15.4(1)T1
Affected: 15.4(1)T3
Affected: 15.4(2)T1
Affected: 15.4(2)T3
Affected: 15.4(2)T2
Affected: 15.4(1)T4
Affected: 15.4(2)T4
Affected: 15.0(2)EA
Affected: 15.0(2)EA1
Affected: 15.2(1)E
Affected: 15.2(2)E
Affected: 15.2(1)E1
Affected: 15.2(3)E
Affected: 15.2(1)E2
Affected: 15.2(1)E3
Affected: 15.2(2)E1
Affected: 15.2(4)E
Affected: 15.2(3)E1
Affected: 15.2(2)E2
Affected: 15.2(2a)E1
Affected: 15.2(2)E3
Affected: 15.2(2a)E2
Affected: 15.2(3)E2
Affected: 15.2(3a)E
Affected: 15.2(3)E3
Affected: 15.2(4)E1
Affected: 15.2(2)E4
Affected: 15.2(2)E5
Affected: 15.2(4)E2
Affected: 15.2(3)E4
Affected: 15.2(5)E
Affected: 15.2(4)E3
Affected: 15.2(2)E6
Affected: 15.2(5a)E
Affected: 15.2(5)E1
Affected: 15.2(5b)E
Affected: 15.2(2)E5a
Affected: 15.2(5c)E
Affected: 15.2(2)E5b
Affected: 15.2(5a)E1
Affected: 15.2(4)E4
Affected: 15.2(5)E2
Affected: 15.3(3)M
Affected: 15.3(3)M1
Affected: 15.3(3)M2
Affected: 15.3(3)M3
Affected: 15.3(3)M5
Affected: 15.3(3)M4
Affected: 15.3(3)M6
Affected: 15.3(3)M7
Affected: 15.3(3)M8
Affected: 15.3(3)M9
Affected: 15.3(3)M8a
Affected: 15.2(4)JN
Affected: 15.0(2)EZ
Affected: 15.2(1)EY
Affected: 15.0(2)EJ
Affected: 15.0(2)EJ1
Affected: 15.2(1)SY
Affected: 15.2(1)SY1
Affected: 15.2(1)SY0a
Affected: 15.2(1)SY2
Affected: 15.2(2)SY
Affected: 15.2(1)SY1a
Affected: 15.2(2)SY1
Affected: 15.2(2)SY2
Affected: 15.2(1)SY3
Affected: 15.2(1)SY4
Affected: 15.2(5)EX
Affected: 15.2(4)JAZ1
Affected: 15.0(2)EK
Affected: 15.0(2)EK1
Affected: 15.4(1)CG
Affected: 15.4(1)CG1
Affected: 15.4(2)CG
Affected: 15.2(2)EB
Affected: 15.2(2)EB1
Affected: 15.2(2)EB2
Affected: 15.5(1)T
Affected: 15.5(1)T1
Affected: 15.5(2)T
Affected: 15.5(1)T2
Affected: 15.5(1)T3
Affected: 15.5(2)T1
Affected: 15.5(2)T2
Affected: 15.5(2)T3
Affected: 15.5(2)T4
Affected: 15.5(1)T4
Affected: 15.2(2)EA
Affected: 15.2(2)EA1
Affected: 15.2(2)EA2
Affected: 15.2(3)EA
Affected: 15.2(4)EA
Affected: 15.2(4)EA1
Affected: 15.2(2)EA3
Affected: 15.2(4)EA3
Affected: 15.2(5)EA
Affected: 15.2(4)EA4
Affected: 15.2(4)EA5
Affected: 15.5(3)M
Affected: 15.5(3)M1
Affected: 15.5(3)M0a
Affected: 15.5(3)M2
Affected: 15.5(3)M3
Affected: 15.5(3)M4
Affected: 15.5(3)M4a
Affected: 15.5(3)M5
Affected: 15.3(3)JAA1
Affected: 15.0(2)SQD
Affected: 15.0(2)SQD1
Affected: 15.0(2)SQD2
Affected: 15.0(2)SQD3
Affected: 15.0(2)SQD4
Affected: 15.0(2)SQD5
Affected: 15.0(2)SQD6
Affected: 15.6(1)T
Affected: 15.6(2)T
Affected: 15.6(1)T0a
Affected: 15.6(1)T1
Affected: 15.6(2)T1
Affected: 15.6(1)T2
Affected: 15.6(2)T2
Affected: 15.6(1)T3
Affected: 15.3(1)SY
Affected: 15.3(1)SY1
Affected: 15.3(1)SY2
Affected: 15.6(3)M
Affected: 15.6(3)M1
Affected: 15.6(3)M0a
Affected: 15.6(3)M1b
Affected: 15.6(3)M2
Affected: 15.6(3)M2a
Affected: 15.2(4)EC1
Affected: 15.2(4)EC2
Affected: 15.3(3)JPC5
Affected: 15.4(1)SY
Affected: 15.4(1)SY1
Affected: 15.4(1)SY2
Affected: 15.5(1)SY
Affected: 15.3(3)JPR1
Create a notification for this product.
    Cisco Cisco IOS XE Software Affected: 3.2.0SG
Affected: 3.2.1SG
Affected: 3.2.2SG
Affected: 3.2.3SG
Affected: 3.2.4SG
Affected: 3.2.5SG
Affected: 3.2.6SG
Affected: 3.2.7SG
Affected: 3.2.8SG
Affected: 3.2.9SG
Affected: 3.2.10SG
Affected: 3.2.11SG
Affected: 3.3.0SG
Affected: 3.3.2SG
Affected: 3.3.1SG
Affected: 3.2.0SE
Affected: 3.2.1SE
Affected: 3.2.2SE
Affected: 3.2.3SE
Affected: 3.3.0SE
Affected: 3.3.1SE
Affected: 3.3.2SE
Affected: 3.3.3SE
Affected: 3.3.4SE
Affected: 3.3.5SE
Affected: 3.4.0SG
Affected: 3.4.2SG
Affected: 3.4.1SG
Affected: 3.4.3SG
Affected: 3.4.4SG
Affected: 3.4.5SG
Affected: 3.4.6SG
Affected: 3.4.7SG
Affected: 3.4.8SG
Affected: 3.5.0E
Affected: 3.5.1E
Affected: 3.5.2E
Affected: 3.5.3E
Affected: 3.6.0E
Affected: 3.6.1E
Affected: 3.6.2aE
Affected: 3.6.2E
Affected: 3.6.3E
Affected: 3.6.4E
Affected: 3.6.5E
Affected: 3.6.6E
Affected: 3.6.5aE
Affected: 3.6.5bE
Affected: 3.3.0SQ
Affected: 3.3.1SQ
Affected: 3.4.0SQ
Affected: 3.4.1SQ
Affected: 3.7.0E
Affected: 3.7.1E
Affected: 3.7.2E
Affected: 3.7.3E
Affected: 3.7.4E
Affected: 3.7.5E
Affected: 3.5.0SQ
Affected: 3.5.1SQ
Affected: 3.5.2SQ
Affected: 3.5.3SQ
Affected: 3.5.4SQ
Affected: 3.5.5SQ
Affected: 3.5.6SQ
Affected: 16.1.1
Affected: 16.1.2
Affected: 16.1.3
Affected: 16.2.1
Affected: 16.2.2
Affected: 3.8.0E
Affected: 3.8.1E
Affected: 3.8.2E
Affected: 3.8.3E
Affected: 3.8.4E
Affected: 16.3.1
Affected: 16.3.2
Affected: 16.3.3
Affected: 16.3.1a
Affected: 16.3.4
Affected: 16.4.1
Affected: 16.4.2
Affected: 16.5.1
Affected: 16.5.1a
Affected: 16.5.1b
Affected: 3.18.1aSP
Affected: 3.18.2aSP
Affected: 3.9.0E
Affected: 3.9.1E
Affected: 3.9.2E
Affected: 17.11.99SW
Create a notification for this product.
CISA Known Exploited Vulnerability
Data from the CISA Known Exploited Vulnerabilities Catalog

Date added: 2022-03-03

Due date: 2022-03-24

Required action: Apply updates per vendor instructions.

Used in ransomware: Unknown

Notes: https://nvd.nist.gov/vuln/detail/CVE-2017-6738

Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-05T15:41:17.135Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "99345",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/99345"
          },
          {
            "name": "1038808",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id/1038808"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2017-6738",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2024-11-08T17:36:26.152413Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-03-03",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6738"
              },
              "type": "kev"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-10-21T23:55:37.567Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "government-resource"
            ],
            "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6738"
          }
        ],
        "timeline": [
          {
            "lang": "en",
            "time": "2022-03-03T00:00:00+00:00",
            "value": "CVE-2017-6738 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "IOS",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "12.2(53)SE1"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE"
            },
            {
              "status": "affected",
              "version": "12.2(50)SE2"
            },
            {
              "status": "affected",
              "version": "12.2(50)SE1"
            },
            {
              "status": "affected",
              "version": "12.2(50)SE5"
            },
            {
              "status": "affected",
              "version": "12.2(53)SE"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE3"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE2"
            },
            {
              "status": "affected",
              "version": "12.2(52)SE"
            },
            {
              "status": "affected",
              "version": "12.2(58)SE"
            },
            {
              "status": "affected",
              "version": "12.2(50)SE3"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE1"
            },
            {
              "status": "affected",
              "version": "12.2(53)SE2"
            },
            {
              "status": "affected",
              "version": "12.2(52)SE1"
            },
            {
              "status": "affected",
              "version": "12.2(54)SE"
            },
            {
              "status": "affected",
              "version": "12.2(50)SE4"
            },
            {
              "status": "affected",
              "version": "12.2(50)SE"
            },
            {
              "status": "affected",
              "version": "12.2(58)SE1"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE4"
            },
            {
              "status": "affected",
              "version": "12.2(58)SE2"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE5"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE6"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE7"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE8"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE9"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE10"
            },
            {
              "status": "affected",
              "version": "12.2(55)SE11"
            },
            {
              "status": "affected",
              "version": "12.2(53)EX"
            },
            {
              "status": "affected",
              "version": "12.2(52)EX"
            },
            {
              "status": "affected",
              "version": "12.2(55)EX"
            },
            {
              "status": "affected",
              "version": "12.2(52)EX1"
            },
            {
              "status": "affected",
              "version": "12.2(55)EX1"
            },
            {
              "status": "affected",
              "version": "12.2(55)EX2"
            },
            {
              "status": "affected",
              "version": "12.2(55)EX3"
            },
            {
              "status": "affected",
              "version": "12.2(58)EX"
            },
            {
              "status": "affected",
              "version": "12.2(55)EY"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY1"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY"
            },
            {
              "status": "affected",
              "version": "12.2(53)EY"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY2"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY1b"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY1c"
            },
            {
              "status": "affected",
              "version": "12.2(58)EY"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY3"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY2a"
            },
            {
              "status": "affected",
              "version": "12.2(58)EY1"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY4"
            },
            {
              "status": "affected",
              "version": "12.2(52)EY3a"
            },
            {
              "status": "affected",
              "version": "12.2(58)EY2"
            },
            {
              "status": "affected",
              "version": "12.2(58)EZ"
            },
            {
              "status": "affected",
              "version": "12.2(53)EZ"
            },
            {
              "status": "affected",
              "version": "12.2(55)EZ"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ1"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ2"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ3"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ4"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ5"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ6"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ7"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ8"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ9"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ10"
            },
            {
              "status": "affected",
              "version": "12.2(60)EZ11"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG3"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG6"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG1"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG2"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG5"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG3"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG8"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG2"
            },
            {
              "status": "affected",
              "version": "12.2(54)SG1"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG1"
            },
            {
              "status": "affected",
              "version": "12.2(52)SG"
            },
            {
              "status": "affected",
              "version": "12.2(54)SG"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG7"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG4"
            },
            {
              "status": "affected",
              "version": "12.2(50)SG4"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG5"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG6"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG7"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG8"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG9"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG10"
            },
            {
              "status": "affected",
              "version": "12.2(53)SG11"
            },
            {
              "status": "affected",
              "version": "12.2(33)SXI"
            },
            {
              "status": "affected",
              "version": "12.2(33)SXI1"
            },
            {
              "status": "affected",
              "version": "12.2(52)XO"
            },
            {
              "status": "affected",
              "version": "12.2(54)XO"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ2"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ1"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ3"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ4"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ5"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ6"
            },
            {
              "status": "affected",
              "version": "12.2(50)SQ7"
            },
            {
              "status": "affected",
              "version": "15.0(1)XO1"
            },
            {
              "status": "affected",
              "version": "15.0(1)XO"
            },
            {
              "status": "affected",
              "version": "15.0(2)XO"
            },
            {
              "status": "affected",
              "version": "15.3(1)T"
            },
            {
              "status": "affected",
              "version": "15.3(2)T"
            },
            {
              "status": "affected",
              "version": "15.3(1)T1"
            },
            {
              "status": "affected",
              "version": "15.3(1)T2"
            },
            {
              "status": "affected",
              "version": "15.3(1)T3"
            },
            {
              "status": "affected",
              "version": "15.3(1)T4"
            },
            {
              "status": "affected",
              "version": "15.3(2)T1"
            },
            {
              "status": "affected",
              "version": "15.3(2)T2"
            },
            {
              "status": "affected",
              "version": "15.3(2)T3"
            },
            {
              "status": "affected",
              "version": "15.3(2)T4"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY1"
            },
            {
              "status": "affected",
              "version": "15.0(1)EY2"
            },
            {
              "status": "affected",
              "version": "15.0(2)EY"
            },
            {
              "status": "affected",
              "version": "15.0(2)EY1"
            },
            {
              "status": "affected",
              "version": "15.0(2)EY2"
            },
            {
              "status": "affected",
              "version": "15.0(2)EY3"
            },
            {
              "status": "affected",
              "version": "12.2(54)WO"
            },
            {
              "status": "affected",
              "version": "15.0(1)SE"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE"
            },
            {
              "status": "affected",
              "version": "15.0(1)SE1"
            },
            {
              "status": "affected",
              "version": "15.0(1)SE2"
            },
            {
              "status": "affected",
              "version": "15.0(1)SE3"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE1"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE3"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE4"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE5"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE6"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE7"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE8"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE9"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE10"
            },
            {
              "status": "affected",
              "version": "15.0(2)SE10a"
            },
            {
              "status": "affected",
              "version": "15.1(1)SG"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG"
            },
            {
              "status": "affected",
              "version": "15.1(1)SG1"
            },
            {
              "status": "affected",
              "version": "15.1(1)SG2"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG1"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG2"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG3"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG4"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG5"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG6"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG7"
            },
            {
              "status": "affected",
              "version": "15.1(2)SG8"
            },
            {
              "status": "affected",
              "version": "15.2(4)M"
            },
            {
              "status": "affected",
              "version": "15.2(4)M1"
            },
            {
              "status": "affected",
              "version": "15.2(4)M2"
            },
            {
              "status": "affected",
              "version": "15.2(4)M4"
            },
            {
              "status": "affected",
              "version": "15.2(4)M3"
            },
            {
              "status": "affected",
              "version": "15.2(4)M5"
            },
            {
              "status": "affected",
              "version": "15.2(4)M8"
            },
            {
              "status": "affected",
              "version": "15.2(4)M10"
            },
            {
              "status": "affected",
              "version": "15.2(4)M7"
            },
            {
              "status": "affected",
              "version": "15.2(4)M6"
            },
            {
              "status": "affected",
              "version": "15.2(4)M9"
            },
            {
              "status": "affected",
              "version": "15.2(4)M6a"
            },
            {
              "status": "affected",
              "version": "15.2(4)M11"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG1"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG3"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG4"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG5"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG6"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG7"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG8"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG9"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG10"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG11"
            },
            {
              "status": "affected",
              "version": "15.0(2)SG11a"
            },
            {
              "status": "affected",
              "version": "15.0(1)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX1"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX2"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX3"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX4"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX8"
            },
            {
              "status": "affected",
              "version": "15.0(2a)EX5"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX10"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX11"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX13"
            },
            {
              "status": "affected",
              "version": "15.0(2)EX12"
            },
            {
              "status": "affected",
              "version": "15.2(2)GC"
            },
            {
              "status": "affected",
              "version": "15.2(3)GC"
            },
            {
              "status": "affected",
              "version": "15.2(3)GC1"
            },
            {
              "status": "affected",
              "version": "15.2(4)GC"
            },
            {
              "status": "affected",
              "version": "15.2(4)GC2"
            },
            {
              "status": "affected",
              "version": "15.2(4)GC3"
            },
            {
              "status": "affected",
              "version": "15.4(1)T"
            },
            {
              "status": "affected",
              "version": "15.4(2)T"
            },
            {
              "status": "affected",
              "version": "15.4(1)T2"
            },
            {
              "status": "affected",
              "version": "15.4(1)T1"
            },
            {
              "status": "affected",
              "version": "15.4(1)T3"
            },
            {
              "status": "affected",
              "version": "15.4(2)T1"
            },
            {
              "status": "affected",
              "version": "15.4(2)T3"
            },
            {
              "status": "affected",
              "version": "15.4(2)T2"
            },
            {
              "status": "affected",
              "version": "15.4(1)T4"
            },
            {
              "status": "affected",
              "version": "15.4(2)T4"
            },
            {
              "status": "affected",
              "version": "15.0(2)EA"
            },
            {
              "status": "affected",
              "version": "15.0(2)EA1"
            },
            {
              "status": "affected",
              "version": "15.2(1)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E"
            },
            {
              "status": "affected",
              "version": "15.2(1)E1"
            },
            {
              "status": "affected",
              "version": "15.2(3)E"
            },
            {
              "status": "affected",
              "version": "15.2(1)E2"
            },
            {
              "status": "affected",
              "version": "15.2(1)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2)E1"
            },
            {
              "status": "affected",
              "version": "15.2(4)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E2"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2a)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3a)E"
            },
            {
              "status": "affected",
              "version": "15.2(3)E3"
            },
            {
              "status": "affected",
              "version": "15.2(4)E1"
            },
            {
              "status": "affected",
              "version": "15.2(2)E4"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5"
            },
            {
              "status": "affected",
              "version": "15.2(4)E2"
            },
            {
              "status": "affected",
              "version": "15.2(3)E4"
            },
            {
              "status": "affected",
              "version": "15.2(5)E"
            },
            {
              "status": "affected",
              "version": "15.2(4)E3"
            },
            {
              "status": "affected",
              "version": "15.2(2)E6"
            },
            {
              "status": "affected",
              "version": "15.2(5a)E"
            },
            {
              "status": "affected",
              "version": "15.2(5)E1"
            },
            {
              "status": "affected",
              "version": "15.2(5b)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5a"
            },
            {
              "status": "affected",
              "version": "15.2(5c)E"
            },
            {
              "status": "affected",
              "version": "15.2(2)E5b"
            },
            {
              "status": "affected",
              "version": "15.2(5a)E1"
            },
            {
              "status": "affected",
              "version": "15.2(4)E4"
            },
            {
              "status": "affected",
              "version": "15.2(5)E2"
            },
            {
              "status": "affected",
              "version": "15.3(3)M"
            },
            {
              "status": "affected",
              "version": "15.3(3)M1"
            },
            {
              "status": "affected",
              "version": "15.3(3)M2"
            },
            {
              "status": "affected",
              "version": "15.3(3)M3"
            },
            {
              "status": "affected",
              "version": "15.3(3)M5"
            },
            {
              "status": "affected",
              "version": "15.3(3)M4"
            },
            {
              "status": "affected",
              "version": "15.3(3)M6"
            },
            {
              "status": "affected",
              "version": "15.3(3)M7"
            },
            {
              "status": "affected",
              "version": "15.3(3)M8"
            },
            {
              "status": "affected",
              "version": "15.3(3)M9"
            },
            {
              "status": "affected",
              "version": "15.3(3)M8a"
            },
            {
              "status": "affected",
              "version": "15.2(4)JN"
            },
            {
              "status": "affected",
              "version": "15.0(2)EZ"
            },
            {
              "status": "affected",
              "version": "15.2(1)EY"
            },
            {
              "status": "affected",
              "version": "15.0(2)EJ"
            },
            {
              "status": "affected",
              "version": "15.0(2)EJ1"
            },
            {
              "status": "affected",
              "version": "15.2(1)SY"
            },
            {
              "status": "affected",
              "version": "15.2(1)SY1"
            },
            {
              "status": "affected",
              "version": "15.2(1)SY0a"
            },
            {
              "status": "affected",
              "version": "15.2(1)SY2"
            },
            {
              "status": "affected",
              "version": "15.2(2)SY"
            },
            {
              "status": "affected",
              "version": "15.2(1)SY1a"
            },
            {
              "status": "affected",
              "version": "15.2(2)SY1"
            },
            {
              "status": "affected",
              "version": "15.2(2)SY2"
            },
            {
              "status": "affected",
              "version": "15.2(1)SY3"
            },
            {
              "status": "affected",
              "version": "15.2(1)SY4"
            },
            {
              "status": "affected",
              "version": "15.2(5)EX"
            },
            {
              "status": "affected",
              "version": "15.2(4)JAZ1"
            },
            {
              "status": "affected",
              "version": "15.0(2)EK"
            },
            {
              "status": "affected",
              "version": "15.0(2)EK1"
            },
            {
              "status": "affected",
              "version": "15.4(1)CG"
            },
            {
              "status": "affected",
              "version": "15.4(1)CG1"
            },
            {
              "status": "affected",
              "version": "15.4(2)CG"
            },
            {
              "status": "affected",
              "version": "15.2(2)EB"
            },
            {
              "status": "affected",
              "version": "15.2(2)EB1"
            },
            {
              "status": "affected",
              "version": "15.2(2)EB2"
            },
            {
              "status": "affected",
              "version": "15.5(1)T"
            },
            {
              "status": "affected",
              "version": "15.5(1)T1"
            },
            {
              "status": "affected",
              "version": "15.5(2)T"
            },
            {
              "status": "affected",
              "version": "15.5(1)T2"
            },
            {
              "status": "affected",
              "version": "15.5(1)T3"
            },
            {
              "status": "affected",
              "version": "15.5(2)T1"
            },
            {
              "status": "affected",
              "version": "15.5(2)T2"
            },
            {
              "status": "affected",
              "version": "15.5(2)T3"
            },
            {
              "status": "affected",
              "version": "15.5(2)T4"
            },
            {
              "status": "affected",
              "version": "15.5(1)T4"
            },
            {
              "status": "affected",
              "version": "15.2(2)EA"
            },
            {
              "status": "affected",
              "version": "15.2(2)EA1"
            },
            {
              "status": "affected",
              "version": "15.2(2)EA2"
            },
            {
              "status": "affected",
              "version": "15.2(3)EA"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA1"
            },
            {
              "status": "affected",
              "version": "15.2(2)EA3"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA3"
            },
            {
              "status": "affected",
              "version": "15.2(5)EA"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA4"
            },
            {
              "status": "affected",
              "version": "15.2(4)EA5"
            },
            {
              "status": "affected",
              "version": "15.5(3)M"
            },
            {
              "status": "affected",
              "version": "15.5(3)M1"
            },
            {
              "status": "affected",
              "version": "15.5(3)M0a"
            },
            {
              "status": "affected",
              "version": "15.5(3)M2"
            },
            {
              "status": "affected",
              "version": "15.5(3)M3"
            },
            {
              "status": "affected",
              "version": "15.5(3)M4"
            },
            {
              "status": "affected",
              "version": "15.5(3)M4a"
            },
            {
              "status": "affected",
              "version": "15.5(3)M5"
            },
            {
              "status": "affected",
              "version": "15.3(3)JAA1"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD1"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD2"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD3"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD4"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD5"
            },
            {
              "status": "affected",
              "version": "15.0(2)SQD6"
            },
            {
              "status": "affected",
              "version": "15.6(1)T"
            },
            {
              "status": "affected",
              "version": "15.6(2)T"
            },
            {
              "status": "affected",
              "version": "15.6(1)T0a"
            },
            {
              "status": "affected",
              "version": "15.6(1)T1"
            },
            {
              "status": "affected",
              "version": "15.6(2)T1"
            },
            {
              "status": "affected",
              "version": "15.6(1)T2"
            },
            {
              "status": "affected",
              "version": "15.6(2)T2"
            },
            {
              "status": "affected",
              "version": "15.6(1)T3"
            },
            {
              "status": "affected",
              "version": "15.3(1)SY"
            },
            {
              "status": "affected",
              "version": "15.3(1)SY1"
            },
            {
              "status": "affected",
              "version": "15.3(1)SY2"
            },
            {
              "status": "affected",
              "version": "15.6(3)M"
            },
            {
              "status": "affected",
              "version": "15.6(3)M1"
            },
            {
              "status": "affected",
              "version": "15.6(3)M0a"
            },
            {
              "status": "affected",
              "version": "15.6(3)M1b"
            },
            {
              "status": "affected",
              "version": "15.6(3)M2"
            },
            {
              "status": "affected",
              "version": "15.6(3)M2a"
            },
            {
              "status": "affected",
              "version": "15.2(4)EC1"
            },
            {
              "status": "affected",
              "version": "15.2(4)EC2"
            },
            {
              "status": "affected",
              "version": "15.3(3)JPC5"
            },
            {
              "status": "affected",
              "version": "15.4(1)SY"
            },
            {
              "status": "affected",
              "version": "15.4(1)SY1"
            },
            {
              "status": "affected",
              "version": "15.4(1)SY2"
            },
            {
              "status": "affected",
              "version": "15.5(1)SY"
            },
            {
              "status": "affected",
              "version": "15.3(3)JPR1"
            }
          ]
        },
        {
          "product": "Cisco IOS XE Software",
          "vendor": "Cisco",
          "versions": [
            {
              "status": "affected",
              "version": "3.2.0SG"
            },
            {
              "status": "affected",
              "version": "3.2.1SG"
            },
            {
              "status": "affected",
              "version": "3.2.2SG"
            },
            {
              "status": "affected",
              "version": "3.2.3SG"
            },
            {
              "status": "affected",
              "version": "3.2.4SG"
            },
            {
              "status": "affected",
              "version": "3.2.5SG"
            },
            {
              "status": "affected",
              "version": "3.2.6SG"
            },
            {
              "status": "affected",
              "version": "3.2.7SG"
            },
            {
              "status": "affected",
              "version": "3.2.8SG"
            },
            {
              "status": "affected",
              "version": "3.2.9SG"
            },
            {
              "status": "affected",
              "version": "3.2.10SG"
            },
            {
              "status": "affected",
              "version": "3.2.11SG"
            },
            {
              "status": "affected",
              "version": "3.3.0SG"
            },
            {
              "status": "affected",
              "version": "3.3.2SG"
            },
            {
              "status": "affected",
              "version": "3.3.1SG"
            },
            {
              "status": "affected",
              "version": "3.2.0SE"
            },
            {
              "status": "affected",
              "version": "3.2.1SE"
            },
            {
              "status": "affected",
              "version": "3.2.2SE"
            },
            {
              "status": "affected",
              "version": "3.2.3SE"
            },
            {
              "status": "affected",
              "version": "3.3.0SE"
            },
            {
              "status": "affected",
              "version": "3.3.1SE"
            },
            {
              "status": "affected",
              "version": "3.3.2SE"
            },
            {
              "status": "affected",
              "version": "3.3.3SE"
            },
            {
              "status": "affected",
              "version": "3.3.4SE"
            },
            {
              "status": "affected",
              "version": "3.3.5SE"
            },
            {
              "status": "affected",
              "version": "3.4.0SG"
            },
            {
              "status": "affected",
              "version": "3.4.2SG"
            },
            {
              "status": "affected",
              "version": "3.4.1SG"
            },
            {
              "status": "affected",
              "version": "3.4.3SG"
            },
            {
              "status": "affected",
              "version": "3.4.4SG"
            },
            {
              "status": "affected",
              "version": "3.4.5SG"
            },
            {
              "status": "affected",
              "version": "3.4.6SG"
            },
            {
              "status": "affected",
              "version": "3.4.7SG"
            },
            {
              "status": "affected",
              "version": "3.4.8SG"
            },
            {
              "status": "affected",
              "version": "3.5.0E"
            },
            {
              "status": "affected",
              "version": "3.5.1E"
            },
            {
              "status": "affected",
              "version": "3.5.2E"
            },
            {
              "status": "affected",
              "version": "3.5.3E"
            },
            {
              "status": "affected",
              "version": "3.6.0E"
            },
            {
              "status": "affected",
              "version": "3.6.1E"
            },
            {
              "status": "affected",
              "version": "3.6.2aE"
            },
            {
              "status": "affected",
              "version": "3.6.2E"
            },
            {
              "status": "affected",
              "version": "3.6.3E"
            },
            {
              "status": "affected",
              "version": "3.6.4E"
            },
            {
              "status": "affected",
              "version": "3.6.5E"
            },
            {
              "status": "affected",
              "version": "3.6.6E"
            },
            {
              "status": "affected",
              "version": "3.6.5aE"
            },
            {
              "status": "affected",
              "version": "3.6.5bE"
            },
            {
              "status": "affected",
              "version": "3.3.0SQ"
            },
            {
              "status": "affected",
              "version": "3.3.1SQ"
            },
            {
              "status": "affected",
              "version": "3.4.0SQ"
            },
            {
              "status": "affected",
              "version": "3.4.1SQ"
            },
            {
              "status": "affected",
              "version": "3.7.0E"
            },
            {
              "status": "affected",
              "version": "3.7.1E"
            },
            {
              "status": "affected",
              "version": "3.7.2E"
            },
            {
              "status": "affected",
              "version": "3.7.3E"
            },
            {
              "status": "affected",
              "version": "3.7.4E"
            },
            {
              "status": "affected",
              "version": "3.7.5E"
            },
            {
              "status": "affected",
              "version": "3.5.0SQ"
            },
            {
              "status": "affected",
              "version": "3.5.1SQ"
            },
            {
              "status": "affected",
              "version": "3.5.2SQ"
            },
            {
              "status": "affected",
              "version": "3.5.3SQ"
            },
            {
              "status": "affected",
              "version": "3.5.4SQ"
            },
            {
              "status": "affected",
              "version": "3.5.5SQ"
            },
            {
              "status": "affected",
              "version": "3.5.6SQ"
            },
            {
              "status": "affected",
              "version": "16.1.1"
            },
            {
              "status": "affected",
              "version": "16.1.2"
            },
            {
              "status": "affected",
              "version": "16.1.3"
            },
            {
              "status": "affected",
              "version": "16.2.1"
            },
            {
              "status": "affected",
              "version": "16.2.2"
            },
            {
              "status": "affected",
              "version": "3.8.0E"
            },
            {
              "status": "affected",
              "version": "3.8.1E"
            },
            {
              "status": "affected",
              "version": "3.8.2E"
            },
            {
              "status": "affected",
              "version": "3.8.3E"
            },
            {
              "status": "affected",
              "version": "3.8.4E"
            },
            {
              "status": "affected",
              "version": "16.3.1"
            },
            {
              "status": "affected",
              "version": "16.3.2"
            },
            {
              "status": "affected",
              "version": "16.3.3"
            },
            {
              "status": "affected",
              "version": "16.3.1a"
            },
            {
              "status": "affected",
              "version": "16.3.4"
            },
            {
              "status": "affected",
              "version": "16.4.1"
            },
            {
              "status": "affected",
              "version": "16.4.2"
            },
            {
              "status": "affected",
              "version": "16.5.1"
            },
            {
              "status": "affected",
              "version": "16.5.1a"
            },
            {
              "status": "affected",
              "version": "16.5.1b"
            },
            {
              "status": "affected",
              "version": "3.18.1aSP"
            },
            {
              "status": "affected",
              "version": "3.18.2aSP"
            },
            {
              "status": "affected",
              "version": "3.9.0E"
            },
            {
              "status": "affected",
              "version": "3.9.1E"
            },
            {
              "status": "affected",
              "version": "3.9.2E"
            },
            {
              "status": "affected",
              "version": "17.11.99SW"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\r\n\r The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\r\n\r Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\r\n\r   There are workarounds that address these vulnerabilities."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "At the time of initial publication, Cisco was aware of external knowledge of the vulnerabilities described in this advisory and, as a precaution, notified customers about the potential for exploitation.\r\n\r\nOn January 6, 2017, a security researcher published functional exploit code for these vulnerabilities.\r\n\r\nThe Cisco Product Security Incident Response Team (PSIRT) is aware of exploitation of the following vulnerabilities that are described in this advisory:\r\n\r\nCVE-2017-6736\r\nCVE-2017-6737\r\nCVE-2017-6738\r\nCVE-2017-6739\r\nCVE-2017-6740\r\nCVE-2017-6742\r\nCVE-2017-6743\r\nCVE-2017-6744\r\n\r\nThe Cisco PSIRT is aware of exploit code available for CVE-2017-6741.\r\n\r\nAdditional information can be found at Cisco TALOS: DNS Hijacking Abuses Trust In Core Internet Service [\"https://blog.talosintelligence.com/2019/04/seaturtle.html\"]."
        }
      ],
      "metrics": [
        {
          "cvssV3_0": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.0"
          },
          "format": "cvssV3_0"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-119",
              "description": "Improper Restriction of Operations within the Bounds of a Memory Buffer",
              "lang": "en",
              "type": "cwe"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-07-31T16:22:43.000Z",
        "orgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
        "shortName": "cisco"
      },
      "references": [
        {
          "name": "cisco-sa-20170629-snmp",
          "url": "https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp"
        }
      ],
      "source": {
        "advisory": "cisco-sa-20170629-snmp",
        "defects": [
          "CSCve89865",
          "CSCsy56638"
        ],
        "discovery": "UNKNOWN"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d1c1063e-7a18-46af-9102-31f8928bc633",
    "assignerShortName": "cisco",
    "cveId": "CVE-2017-6738",
    "datePublished": "2017-07-17T21:00:00.000Z",
    "dateReserved": "2017-03-09T00:00:00.000Z",
    "dateUpdated": "2025-10-21T23:55:37.567Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "cisa_known_exploited": {
      "cveID": "CVE-2017-6738",
      "cwes": "[\"CWE-119\"]",
      "dateAdded": "2022-03-03",
      "dueDate": "2022-03-24",
      "knownRansomwareCampaignUse": "Unknown",
      "notes": "https://nvd.nist.gov/vuln/detail/CVE-2017-6738",
      "product": "IOS and IOS XE Software",
      "requiredAction": "Apply updates per vendor instructions.",
      "shortDescription": "The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.",
      "vendorProject": "Cisco",
      "vulnerabilityName": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability"
    },
    "fkie_nvd": {
      "cisaActionDue": "2022-03-24",
      "cisaExploitAdd": "2022-03-03",
      "cisaRequiredAction": "Apply updates per vendor instructions.",
      "cisaVulnerabilityName": "Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability",
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"12.0\", \"versionEndIncluding\": \"12.4\", \"matchCriteriaId\": \"63ACD7DB-DCFE-4CDB-A3F0-4E413E178315\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"15.0\", \"versionEndIncluding\": \"15.6\", \"matchCriteriaId\": \"650EB42C-D85F-482B-972D-7DCAC210DC48\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"2.2.0\", \"versionEndIncluding\": \"3.17.0\", \"matchCriteriaId\": \"0B36DE05-C663-4F15-B52C-921378DA4CD4\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.2 through 3.17 contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP: Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. Cisco Bug IDs: CSCve89865, CSCsy56638.\"}, {\"lang\": \"es\", \"value\": \"El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene m\\u00faltiples vulnerabilidades que pueden permitir una autenticaci\\u00f3n a un atacante remoto para ejecutar c\\u00f3digo remotamente en el sistema afectado o causar una recarga. Un atacante podr\\u00eda explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tr\\u00e1fico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versi\\u00f3n 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusi\\u00f3n explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve89865, CSCsy56638.\"}]",
      "id": "CVE-2017-6738",
      "lastModified": "2024-11-21T03:30:24.867",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"baseScore\": 8.8, \"baseSeverity\": \"HIGH\", \"attackVector\": \"NETWORK\", \"attackComplexity\": \"LOW\", \"privilegesRequired\": \"LOW\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"HIGH\", \"availabilityImpact\": \"HIGH\"}, \"exploitabilityScore\": 2.8, \"impactScore\": 5.9}], \"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:C/I:C/A:C\", \"baseScore\": 9.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"COMPLETE\", \"integrityImpact\": \"COMPLETE\", \"availabilityImpact\": \"COMPLETE\"}, \"baseSeverity\": \"HIGH\", \"exploitabilityScore\": 8.0, \"impactScore\": 10.0, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2017-07-17T21:29:00.290",
      "references": "[{\"url\": \"http://www.securityfocus.com/bid/99345\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1038808\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp\", \"source\": \"ykramarz@cisco.com\", \"tags\": [\"Vendor Advisory\"]}, {\"url\": \"http://www.securityfocus.com/bid/99345\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"http://www.securitytracker.com/id/1038808\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Broken Link\", \"Third Party Advisory\", \"VDB Entry\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Vendor Advisory\"]}]",
      "sourceIdentifier": "ykramarz@cisco.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"ykramarz@cisco.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-119\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2017-6738\",\"sourceIdentifier\":\"psirt@cisco.com\",\"published\":\"2017-07-17T21:29:00.290\",\"lastModified\":\"2025-10-22T00:16:09.067\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\\r\\n\\r The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\\r\\n\\r Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\\r\\n\\r   There are workarounds that address these vulnerabilities.\"},{\"lang\":\"es\",\"value\":\"El protocolo SNMP (SimpleNetwork Management Protocol) de Cisco iOS 12.0 hasta la 12.4, 15.0 hasta la 15.6 e iOS XE 2.2 hasta la 3.17 contiene m\u00faltiples vulnerabilidades que pueden permitir una autenticaci\u00f3n a un atacante remoto para ejecutar c\u00f3digo remotamente en el sistema afectado o causar una recarga. Un atacante podr\u00eda explotar estas vulnerabilidades enviando un paquete SNMP manipulado al sistema afectado mediante IPv4 o IPv6. Solo el tr\u00e1fico directo al sistema afectado puede usarse para explotar estar vulnerabilidades. Esta vulnerabilidades son debidas a un buffer overflow en el subsistema SNMP del software afectado. Esta vulnerabilidad afecta a todas las versiones de SNMP: Versiones 1, 2c y 3. Para explotarlas en versiones 2c o anteriores, el atacante debe saber sobre la cadena comunitaria de solo lectura del SNMP del sistema afectado. Pra explotarlas en las versi\u00f3n 3, el atacante tiene que tener credenciales de usuario del sistema. Todos los dispositivos que tienen habilitado el SNMP y no tienen una exclusi\u00f3n explicita del MIB u OID afectado debe ser considerado vulnerable. Cisco Bug IDs: CSCve89865, CSCsy56638.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV30\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.0\",\"vectorString\":\"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.8,\"impactScore\":5.9}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:C/I:C/A:C\",\"baseScore\":9.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"COMPLETE\",\"integrityImpact\":\"COMPLETE\",\"availabilityImpact\":\"COMPLETE\"},\"baseSeverity\":\"HIGH\",\"exploitabilityScore\":8.0,\"impactScore\":10.0,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"cisaExploitAdd\":\"2022-03-03\",\"cisaActionDue\":\"2022-03-24\",\"cisaRequiredAction\":\"Apply updates per vendor instructions.\",\"cisaVulnerabilityName\":\"Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability\",\"weaknesses\":[{\"source\":\"psirt@cisco.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-119\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.0\",\"versionEndIncluding\":\"12.4\",\"matchCriteriaId\":\"63ACD7DB-DCFE-4CDB-A3F0-4E413E178315\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"15.0\",\"versionEndIncluding\":\"15.6\",\"matchCriteriaId\":\"650EB42C-D85F-482B-972D-7DCAC210DC48\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2.2.0\",\"versionEndIncluding\":\"3.17.0\",\"matchCriteriaId\":\"0B36DE05-C663-4F15-B52C-921378DA4CD4\"}]}]}],\"references\":[{\"url\":\"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp\",\"source\":\"psirt@cisco.com\"},{\"url\":\"http://www.securityfocus.com/bid/99345\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"http://www.securitytracker.com/id/1038808\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Broken Link\",\"Third Party Advisory\",\"VDB Entry\"]},{\"url\":\"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6738\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\"}]}}",
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"http://www.securityfocus.com/bid/99345\", \"name\": \"99345\", \"tags\": [\"vdb-entry\", \"x_refsource_BID\", \"x_transferred\"]}, {\"url\": \"http://www.securitytracker.com/id/1038808\", \"name\": \"1038808\", \"tags\": [\"vdb-entry\", \"x_refsource_SECTRACK\", \"x_transferred\"]}, {\"url\": \"https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp\", \"tags\": [\"x_refsource_CONFIRM\", \"x_transferred\"]}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2024-08-05T15:41:17.135Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2017-6738\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2024-11-08T17:36:26.152413Z\"}}}, {\"other\": {\"type\": \"kev\", \"content\": {\"dateAdded\": \"2022-03-03\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6738\"}}}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2022-03-03T00:00:00+00:00\", \"value\": \"CVE-2017-6738 added to CISA KEV\"}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2024-11-08T16:07:14.118Z\"}}], \"cna\": {\"source\": {\"defects\": [\"CSCve89865\", \"CSCsy56638\"], \"advisory\": \"cisco-sa-20170629-snmp\", \"discovery\": \"UNKNOWN\"}, \"metrics\": [{\"format\": \"cvssV3_0\", \"cvssV3_0\": {\"scope\": \"UNCHANGED\", \"version\": \"3.0\", \"baseScore\": 8.8, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"vendor\": \"Cisco\", \"product\": \"IOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"12.2(53)SE1\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SE2\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SE1\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SE5\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SE\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE3\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE2\"}, {\"status\": \"affected\", \"version\": \"12.2(52)SE\"}, {\"status\": \"affected\", \"version\": \"12.2(58)SE\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SE3\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE1\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SE2\"}, {\"status\": \"affected\", \"version\": \"12.2(52)SE1\"}, {\"status\": \"affected\", \"version\": \"12.2(54)SE\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SE4\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SE\"}, {\"status\": \"affected\", \"version\": \"12.2(58)SE1\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE4\"}, {\"status\": \"affected\", \"version\": \"12.2(58)SE2\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE5\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE6\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE7\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE8\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE9\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE10\"}, {\"status\": \"affected\", \"version\": \"12.2(55)SE11\"}, {\"status\": \"affected\", \"version\": \"12.2(53)EX\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EX\"}, {\"status\": \"affected\", \"version\": \"12.2(55)EX\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EX1\"}, {\"status\": \"affected\", \"version\": \"12.2(55)EX1\"}, {\"status\": \"affected\", \"version\": \"12.2(55)EX2\"}, {\"status\": \"affected\", \"version\": \"12.2(55)EX3\"}, {\"status\": \"affected\", \"version\": \"12.2(58)EX\"}, {\"status\": \"affected\", \"version\": \"12.2(55)EY\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY1\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY\"}, {\"status\": \"affected\", \"version\": \"12.2(53)EY\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY2\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY1b\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY1c\"}, {\"status\": \"affected\", \"version\": \"12.2(58)EY\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY3\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY2a\"}, {\"status\": \"affected\", \"version\": \"12.2(58)EY1\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY4\"}, {\"status\": \"affected\", \"version\": \"12.2(52)EY3a\"}, {\"status\": \"affected\", \"version\": \"12.2(58)EY2\"}, {\"status\": \"affected\", \"version\": \"12.2(58)EZ\"}, {\"status\": \"affected\", \"version\": \"12.2(53)EZ\"}, {\"status\": \"affected\", \"version\": \"12.2(55)EZ\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ1\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ2\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ3\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ4\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ5\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ6\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ7\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ8\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ9\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ10\"}, {\"status\": \"affected\", \"version\": \"12.2(60)EZ11\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG3\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG6\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG1\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG2\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG5\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG3\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG8\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG2\"}, {\"status\": \"affected\", \"version\": \"12.2(54)SG1\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG1\"}, {\"status\": \"affected\", \"version\": \"12.2(52)SG\"}, {\"status\": \"affected\", \"version\": \"12.2(54)SG\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG7\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG4\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SG4\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG5\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG6\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG7\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG8\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG9\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG10\"}, {\"status\": \"affected\", \"version\": \"12.2(53)SG11\"}, {\"status\": \"affected\", \"version\": \"12.2(33)SXI\"}, {\"status\": \"affected\", \"version\": \"12.2(33)SXI1\"}, {\"status\": \"affected\", \"version\": \"12.2(52)XO\"}, {\"status\": \"affected\", \"version\": \"12.2(54)XO\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ2\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ1\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ3\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ4\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ5\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ6\"}, {\"status\": \"affected\", \"version\": \"12.2(50)SQ7\"}, {\"status\": \"affected\", \"version\": \"15.0(1)XO1\"}, {\"status\": \"affected\", \"version\": \"15.0(1)XO\"}, {\"status\": \"affected\", \"version\": \"15.0(2)XO\"}, {\"status\": \"affected\", \"version\": \"15.3(1)T\"}, {\"status\": \"affected\", \"version\": \"15.3(2)T\"}, {\"status\": \"affected\", \"version\": \"15.3(1)T1\"}, {\"status\": \"affected\", \"version\": \"15.3(1)T2\"}, {\"status\": \"affected\", \"version\": \"15.3(1)T3\"}, {\"status\": \"affected\", \"version\": \"15.3(1)T4\"}, {\"status\": \"affected\", \"version\": \"15.3(2)T1\"}, {\"status\": \"affected\", \"version\": \"15.3(2)T2\"}, {\"status\": \"affected\", \"version\": \"15.3(2)T3\"}, {\"status\": \"affected\", \"version\": \"15.3(2)T4\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EY\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EY1\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EY2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EY\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EY1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EY2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EY3\"}, {\"status\": \"affected\", \"version\": \"12.2(54)WO\"}, {\"status\": \"affected\", \"version\": \"15.0(1)SE\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE\"}, {\"status\": \"affected\", \"version\": \"15.0(1)SE1\"}, {\"status\": \"affected\", \"version\": \"15.0(1)SE2\"}, {\"status\": \"affected\", \"version\": \"15.0(1)SE3\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE3\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE4\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE6\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE7\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE8\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE9\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE10\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SE10a\"}, {\"status\": \"affected\", \"version\": \"15.1(1)SG\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG\"}, {\"status\": \"affected\", \"version\": \"15.1(1)SG1\"}, {\"status\": \"affected\", \"version\": \"15.1(1)SG2\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG1\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG2\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG3\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG4\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG5\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG6\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG7\"}, {\"status\": \"affected\", \"version\": \"15.1(2)SG8\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M1\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M2\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M4\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M3\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M5\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M8\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M10\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M7\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M6\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M9\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M6a\"}, {\"status\": \"affected\", \"version\": \"15.2(4)M11\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG3\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG4\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG6\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG7\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG8\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG9\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG10\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG11\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SG11a\"}, {\"status\": \"affected\", \"version\": \"15.0(1)EX\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX3\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX4\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX8\"}, {\"status\": \"affected\", \"version\": \"15.0(2a)EX5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX10\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX11\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX13\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EX12\"}, {\"status\": \"affected\", \"version\": \"15.2(2)GC\"}, {\"status\": \"affected\", \"version\": \"15.2(3)GC\"}, {\"status\": \"affected\", \"version\": \"15.2(3)GC1\"}, {\"status\": \"affected\", \"version\": \"15.2(4)GC\"}, {\"status\": \"affected\", \"version\": \"15.2(4)GC2\"}, {\"status\": \"affected\", \"version\": \"15.2(4)GC3\"}, {\"status\": \"affected\", \"version\": \"15.4(1)T\"}, {\"status\": \"affected\", \"version\": \"15.4(2)T\"}, {\"status\": \"affected\", \"version\": \"15.4(1)T2\"}, {\"status\": \"affected\", \"version\": \"15.4(1)T1\"}, {\"status\": \"affected\", \"version\": \"15.4(1)T3\"}, {\"status\": \"affected\", \"version\": \"15.4(2)T1\"}, {\"status\": \"affected\", \"version\": \"15.4(2)T3\"}, {\"status\": \"affected\", \"version\": \"15.4(2)T2\"}, {\"status\": \"affected\", \"version\": \"15.4(1)T4\"}, {\"status\": \"affected\", \"version\": \"15.4(2)T4\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EA\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EA1\"}, {\"status\": \"affected\", \"version\": \"15.2(1)E\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E\"}, {\"status\": \"affected\", \"version\": \"15.2(1)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E\"}, {\"status\": \"affected\", \"version\": \"15.2(1)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(1)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(2a)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(2a)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(3a)E\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E5\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E2\"}, {\"status\": \"affected\", \"version\": \"15.2(3)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(5)E\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E3\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E6\"}, {\"status\": \"affected\", \"version\": \"15.2(5a)E\"}, {\"status\": \"affected\", \"version\": \"15.2(5)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(5b)E\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E5a\"}, {\"status\": \"affected\", \"version\": \"15.2(5c)E\"}, {\"status\": \"affected\", \"version\": \"15.2(2)E5b\"}, {\"status\": \"affected\", \"version\": \"15.2(5a)E1\"}, {\"status\": \"affected\", \"version\": \"15.2(4)E4\"}, {\"status\": \"affected\", \"version\": \"15.2(5)E2\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M1\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M2\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M3\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M5\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M4\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M6\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M7\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M8\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M9\"}, {\"status\": \"affected\", \"version\": \"15.3(3)M8a\"}, {\"status\": \"affected\", \"version\": \"15.2(4)JN\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EZ\"}, {\"status\": \"affected\", \"version\": \"15.2(1)EY\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EJ\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EJ1\"}, {\"status\": \"affected\", \"version\": \"15.2(1)SY\"}, {\"status\": \"affected\", \"version\": \"15.2(1)SY1\"}, {\"status\": \"affected\", \"version\": \"15.2(1)SY0a\"}, {\"status\": \"affected\", \"version\": \"15.2(1)SY2\"}, {\"status\": \"affected\", \"version\": \"15.2(2)SY\"}, {\"status\": \"affected\", \"version\": \"15.2(1)SY1a\"}, {\"status\": \"affected\", \"version\": \"15.2(2)SY1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)SY2\"}, {\"status\": \"affected\", \"version\": \"15.2(1)SY3\"}, {\"status\": \"affected\", \"version\": \"15.2(1)SY4\"}, {\"status\": \"affected\", \"version\": \"15.2(5)EX\"}, {\"status\": \"affected\", \"version\": \"15.2(4)JAZ1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EK\"}, {\"status\": \"affected\", \"version\": \"15.0(2)EK1\"}, {\"status\": \"affected\", \"version\": \"15.4(1)CG\"}, {\"status\": \"affected\", \"version\": \"15.4(1)CG1\"}, {\"status\": \"affected\", \"version\": \"15.4(2)CG\"}, {\"status\": \"affected\", \"version\": \"15.2(2)EB\"}, {\"status\": \"affected\", \"version\": \"15.2(2)EB1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)EB2\"}, {\"status\": \"affected\", \"version\": \"15.5(1)T\"}, {\"status\": \"affected\", \"version\": \"15.5(1)T1\"}, {\"status\": \"affected\", \"version\": \"15.5(2)T\"}, {\"status\": \"affected\", \"version\": \"15.5(1)T2\"}, {\"status\": \"affected\", \"version\": \"15.5(1)T3\"}, {\"status\": \"affected\", \"version\": \"15.5(2)T1\"}, {\"status\": \"affected\", \"version\": \"15.5(2)T2\"}, {\"status\": \"affected\", \"version\": \"15.5(2)T3\"}, {\"status\": \"affected\", \"version\": \"15.5(2)T4\"}, {\"status\": \"affected\", \"version\": \"15.5(1)T4\"}, {\"status\": \"affected\", \"version\": \"15.2(2)EA\"}, {\"status\": \"affected\", \"version\": \"15.2(2)EA1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)EA2\"}, {\"status\": \"affected\", \"version\": \"15.2(3)EA\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA1\"}, {\"status\": \"affected\", \"version\": \"15.2(2)EA3\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA3\"}, {\"status\": \"affected\", \"version\": \"15.2(5)EA\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA4\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EA5\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M1\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M0a\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M2\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M3\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M4\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M4a\"}, {\"status\": \"affected\", \"version\": \"15.5(3)M5\"}, {\"status\": \"affected\", \"version\": \"15.3(3)JAA1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD1\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD2\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD3\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD4\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD5\"}, {\"status\": \"affected\", \"version\": \"15.0(2)SQD6\"}, {\"status\": \"affected\", \"version\": \"15.6(1)T\"}, {\"status\": \"affected\", \"version\": \"15.6(2)T\"}, {\"status\": \"affected\", \"version\": \"15.6(1)T0a\"}, {\"status\": \"affected\", \"version\": \"15.6(1)T1\"}, {\"status\": \"affected\", \"version\": \"15.6(2)T1\"}, {\"status\": \"affected\", \"version\": \"15.6(1)T2\"}, {\"status\": \"affected\", \"version\": \"15.6(2)T2\"}, {\"status\": \"affected\", \"version\": \"15.6(1)T3\"}, {\"status\": \"affected\", \"version\": \"15.3(1)SY\"}, {\"status\": \"affected\", \"version\": \"15.3(1)SY1\"}, {\"status\": \"affected\", \"version\": \"15.3(1)SY2\"}, {\"status\": \"affected\", \"version\": \"15.6(3)M\"}, {\"status\": \"affected\", \"version\": \"15.6(3)M1\"}, {\"status\": \"affected\", \"version\": \"15.6(3)M0a\"}, {\"status\": \"affected\", \"version\": \"15.6(3)M1b\"}, {\"status\": \"affected\", \"version\": \"15.6(3)M2\"}, {\"status\": \"affected\", \"version\": \"15.6(3)M2a\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EC1\"}, {\"status\": \"affected\", \"version\": \"15.2(4)EC2\"}, {\"status\": \"affected\", \"version\": \"15.3(3)JPC5\"}, {\"status\": \"affected\", \"version\": \"15.4(1)SY\"}, {\"status\": \"affected\", \"version\": \"15.4(1)SY1\"}, {\"status\": \"affected\", \"version\": \"15.4(1)SY2\"}, {\"status\": \"affected\", \"version\": \"15.5(1)SY\"}, {\"status\": \"affected\", \"version\": \"15.3(3)JPR1\"}]}, {\"vendor\": \"Cisco\", \"product\": \"Cisco IOS XE Software\", \"versions\": [{\"status\": \"affected\", \"version\": \"3.2.0SG\"}, {\"status\": \"affected\", \"version\": \"3.2.1SG\"}, {\"status\": \"affected\", \"version\": \"3.2.2SG\"}, {\"status\": \"affected\", \"version\": \"3.2.3SG\"}, {\"status\": \"affected\", \"version\": \"3.2.4SG\"}, {\"status\": \"affected\", \"version\": \"3.2.5SG\"}, {\"status\": \"affected\", \"version\": \"3.2.6SG\"}, {\"status\": \"affected\", \"version\": \"3.2.7SG\"}, {\"status\": \"affected\", \"version\": \"3.2.8SG\"}, {\"status\": \"affected\", \"version\": \"3.2.9SG\"}, {\"status\": \"affected\", \"version\": \"3.2.10SG\"}, {\"status\": \"affected\", \"version\": \"3.2.11SG\"}, {\"status\": \"affected\", \"version\": \"3.3.0SG\"}, {\"status\": \"affected\", \"version\": \"3.3.2SG\"}, {\"status\": \"affected\", \"version\": \"3.3.1SG\"}, {\"status\": \"affected\", \"version\": \"3.2.0SE\"}, {\"status\": \"affected\", \"version\": \"3.2.1SE\"}, {\"status\": \"affected\", \"version\": \"3.2.2SE\"}, {\"status\": \"affected\", \"version\": \"3.2.3SE\"}, {\"status\": \"affected\", \"version\": \"3.3.0SE\"}, {\"status\": \"affected\", \"version\": \"3.3.1SE\"}, {\"status\": \"affected\", \"version\": \"3.3.2SE\"}, {\"status\": \"affected\", \"version\": \"3.3.3SE\"}, {\"status\": \"affected\", \"version\": \"3.3.4SE\"}, {\"status\": \"affected\", \"version\": \"3.3.5SE\"}, {\"status\": \"affected\", \"version\": \"3.4.0SG\"}, {\"status\": \"affected\", \"version\": \"3.4.2SG\"}, {\"status\": \"affected\", \"version\": \"3.4.1SG\"}, {\"status\": \"affected\", \"version\": \"3.4.3SG\"}, {\"status\": \"affected\", \"version\": \"3.4.4SG\"}, {\"status\": \"affected\", \"version\": \"3.4.5SG\"}, {\"status\": \"affected\", \"version\": \"3.4.6SG\"}, {\"status\": \"affected\", \"version\": \"3.4.7SG\"}, {\"status\": \"affected\", \"version\": \"3.4.8SG\"}, {\"status\": \"affected\", \"version\": \"3.5.0E\"}, {\"status\": \"affected\", \"version\": \"3.5.1E\"}, {\"status\": \"affected\", \"version\": \"3.5.2E\"}, {\"status\": \"affected\", \"version\": \"3.5.3E\"}, {\"status\": \"affected\", \"version\": \"3.6.0E\"}, {\"status\": \"affected\", \"version\": \"3.6.1E\"}, {\"status\": \"affected\", \"version\": \"3.6.2aE\"}, {\"status\": \"affected\", \"version\": \"3.6.2E\"}, {\"status\": \"affected\", \"version\": \"3.6.3E\"}, {\"status\": \"affected\", \"version\": \"3.6.4E\"}, {\"status\": \"affected\", \"version\": \"3.6.5E\"}, {\"status\": \"affected\", \"version\": \"3.6.6E\"}, {\"status\": \"affected\", \"version\": \"3.6.5aE\"}, {\"status\": \"affected\", \"version\": \"3.6.5bE\"}, {\"status\": \"affected\", \"version\": \"3.3.0SQ\"}, {\"status\": \"affected\", \"version\": \"3.3.1SQ\"}, {\"status\": \"affected\", \"version\": \"3.4.0SQ\"}, {\"status\": \"affected\", \"version\": \"3.4.1SQ\"}, {\"status\": \"affected\", \"version\": \"3.7.0E\"}, {\"status\": \"affected\", \"version\": \"3.7.1E\"}, {\"status\": \"affected\", \"version\": \"3.7.2E\"}, {\"status\": \"affected\", \"version\": \"3.7.3E\"}, {\"status\": \"affected\", \"version\": \"3.7.4E\"}, {\"status\": \"affected\", \"version\": \"3.7.5E\"}, {\"status\": \"affected\", \"version\": \"3.5.0SQ\"}, {\"status\": \"affected\", \"version\": \"3.5.1SQ\"}, {\"status\": \"affected\", \"version\": \"3.5.2SQ\"}, {\"status\": \"affected\", \"version\": \"3.5.3SQ\"}, {\"status\": \"affected\", \"version\": \"3.5.4SQ\"}, {\"status\": \"affected\", \"version\": \"3.5.5SQ\"}, {\"status\": \"affected\", \"version\": \"3.5.6SQ\"}, {\"status\": \"affected\", \"version\": \"16.1.1\"}, {\"status\": \"affected\", \"version\": \"16.1.2\"}, {\"status\": \"affected\", \"version\": \"16.1.3\"}, {\"status\": \"affected\", \"version\": \"16.2.1\"}, {\"status\": \"affected\", \"version\": \"16.2.2\"}, {\"status\": \"affected\", \"version\": \"3.8.0E\"}, {\"status\": \"affected\", \"version\": \"3.8.1E\"}, {\"status\": \"affected\", \"version\": \"3.8.2E\"}, {\"status\": \"affected\", \"version\": \"3.8.3E\"}, {\"status\": \"affected\", \"version\": \"3.8.4E\"}, {\"status\": \"affected\", \"version\": \"16.3.1\"}, {\"status\": \"affected\", \"version\": \"16.3.2\"}, {\"status\": \"affected\", \"version\": \"16.3.3\"}, {\"status\": \"affected\", \"version\": \"16.3.1a\"}, {\"status\": \"affected\", \"version\": \"16.3.4\"}, {\"status\": \"affected\", \"version\": \"16.4.1\"}, {\"status\": \"affected\", \"version\": \"16.4.2\"}, {\"status\": \"affected\", \"version\": \"16.5.1\"}, {\"status\": \"affected\", \"version\": \"16.5.1a\"}, {\"status\": \"affected\", \"version\": \"16.5.1b\"}, {\"status\": \"affected\", \"version\": \"3.18.1aSP\"}, {\"status\": \"affected\", \"version\": \"3.18.2aSP\"}, {\"status\": \"affected\", \"version\": \"3.9.0E\"}, {\"status\": \"affected\", \"version\": \"3.9.1E\"}, {\"status\": \"affected\", \"version\": \"3.9.2E\"}, {\"status\": \"affected\", \"version\": \"17.11.99SW\"}]}], \"exploits\": [{\"lang\": \"en\", \"value\": \"At the time of initial publication, Cisco was aware of external knowledge of the vulnerabilities described in this advisory and, as a precaution, notified customers about the potential for exploitation.\\r\\n\\r\\nOn January 6, 2017, a security researcher published functional exploit code for these vulnerabilities.\\r\\n\\r\\nThe Cisco Product Security Incident Response Team (PSIRT) is aware of exploitation of the following vulnerabilities that are described in this advisory:\\r\\n\\r\\nCVE-2017-6736\\r\\nCVE-2017-6737\\r\\nCVE-2017-6738\\r\\nCVE-2017-6739\\r\\nCVE-2017-6740\\r\\nCVE-2017-6742\\r\\nCVE-2017-6743\\r\\nCVE-2017-6744\\r\\n\\r\\nThe Cisco PSIRT is aware of exploit code available for CVE-2017-6741.\\r\\n\\r\\nAdditional information can be found at Cisco TALOS: DNS Hijacking Abuses Trust In Core Internet Service [\\\"https://blog.talosintelligence.com/2019/04/seaturtle.html\\\"].\"}], \"references\": [{\"url\": \"https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp\", \"name\": \"cisco-sa-20170629-snmp\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.\\r\\n\\r The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.\\r\\n\\r Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.\\r\\n\\r   There are workarounds that address these vulnerabilities.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"cwe\", \"cweId\": \"CWE-119\", \"description\": \"Improper Restriction of Operations within the Bounds of a Memory Buffer\"}]}], \"providerMetadata\": {\"orgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"shortName\": \"cisco\", \"dateUpdated\": \"2025-07-31T16:22:43.000Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2017-6738\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-07-31T16:22:43.000Z\", \"dateReserved\": \"2017-03-09T00:00:00.000Z\", \"assignerOrgId\": \"d1c1063e-7a18-46af-9102-31f8928bc633\", \"datePublished\": \"2017-07-17T21:00:00.000Z\", \"assignerShortName\": \"cisco\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…