N/A

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.  The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.

N/A

N/A

Cisco IOS和IOS XE Simple Network Management Protocol子系统缓冲区错误漏洞

Cisco IOS和IOS XE都是美国思科（Cisco）公司为其网络设备开发的操作系统。Simple Network Management Protocol（SNMP）subsystem是其中的一个用于网络设备管理信息交换的简单网络管理子系统。 Cisco IOS 12.0版本至12.4版本、15.0版本至15.6版本和IOS XE 2.2版本至3.17版本中的SNMP子系统存在缓冲区溢出漏洞。远程攻击者可通过向受影响的系统发送特制的SNMP数据包利用该漏洞在受影响的系统上执行任意代码。以下版本受到影响

N/A

N/A