Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ESC could generate an admin session token that allows access to all instances of the ESC web UI. This vulnerability affects Cisco Elastic Services Controller prior to releases 2.3.1.434 and 2.3.2. Cisco Bug IDs: CSCvc76627. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99437 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-esc2
CVE ID: CVE-2017-6714 State: PUBLISHED Published: 2017-07-06T00:00:00 Last Updated: 2024-08-05T15:41:17.184Z Vendors: n/a Products: Cisco Ultra Services Framework Problem Types: CWE-78 Description: A vulnerability in the AutoIT service of Cisco Ultra Services Framework Staging Server could allow an unauthenticated, remote attacker to execute arbitrary shell commands as the Linux root user. The vulnerability is due to improper shell invocations. An attacker could exploit this vulnerability by crafting CLI command inputs to execute Linux shell commands as the root user. This vulnerability affects all releases of Cisco Ultra Services Framework Staging Server prior to Releases 5.0.3 and 5.1. Cis
vulnerability affects all releases of Cisco Ultra Services Framework Staging Server prior to Releases 5.0.3 and 5.1. Cisco Bug IDs: CSCvc76673. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99436 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-usf3
CVE ID: CVE-2017-6715 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.595Z Vendors: n/a Products: Cisco Firepower Management Center Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. Affected Products: Cisco Firepower Management Center Releases 5.4.1.x and prior. More Information: CSCuy88951. Known Affected Releases: 5.4.1.6. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99209 - https://tools.ci
ditional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99209 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc1
CVE ID: CVE-2017-6716 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.521Z Vendors: n/a Products: Cisco Firepower Management Center Problem Types: Stored Cross-Site Scripting Vulnerability Description: A vulnerability in the web framework code of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. Affected Products: Cisco Firepower Management Center Software Releases prior to 6.0.0.0. More Information: CSCuy88785. Known Affected Releases: 5.4.1.6. Additional Analyst Notes: - CVE Program Container: References: - https://
CSCuy88785. Known Affected Releases: 5.4.1.6. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fmc2 - http://www.securityfocus.com/bid/99220
CVE ID: CVE-2017-6717 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.675Z Vendors: n/a Products: Cisco Firepower Management Center Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web framework of Cisco Firepower Management Center could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface. More Information: CSCvc38801. Known Affected Releases: 6.0.1.3 6.2.1. Known Fixed Releases: 6.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fpmc - http://w
r: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-fpmc - http://www.securityfocus.com/bid/99217
CVE ID: CVE-2017-6718 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.052Z Vendors: n/a Products: Cisco IOS XR Problem Types: Privilege Escalation Vulnerability Description: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges to the root level. More Information: CSCvb99384. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.11.3i.ROUT 6.2.1.29i.ROUT 6.2.1.26i.ROUT. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios1 - http://www.securitytracker.com/id/1038741 - http://www.secu
enter/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios1 - http://www.securitytracker.com/id/1038741 - http://www.securityfocus.com/bid/99226
CVE ID: CVE-2017-6719 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:16.529Z Vendors: n/a Products: Cisco IOS XR Problem Types: Local Command Injection Vulnerability Description: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary commands on the host operating system with root privileges, aka Command Injection. More Information: CSCvb99406. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.2.1.28i.BASE 6.2.1.22i.BASE 6.1.32.8i.BASE 6.1.31.3i.BASE 6.1.3.10i.BASE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99213 - http://www.securi
itional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99213 - http://www.securitytracker.com/id/1038741 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ios
CVE ID: CVE-2017-6720 State: PUBLISHED Published: 2017-09-21T05:00:00 Last Updated: 2024-08-05T15:41:16.614Z Vendors: n/a Products: Cisco Small Business Managed Switches Problem Types: CWE-119 Description: A vulnerability in the Secure Shell (SSH) subsystem of Cisco Small Business Managed Switches software could allow an authenticated, remote attacker to cause a reload of the affected switch, resulting in a denial of service (DoS) condition. The vulnerability is due to improper processing of SSH connections. An attacker could exploit this vulnerability by logging in to an affected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when
ffected switch via SSH and sending a malicious SSH message. This vulnerability affects the following Cisco products when SSH is enabled: Small Business 300 Series Managed Switches, Small Business 500 Series Stackable Managed Switches, 350 Series Managed Switches, 350X Series Stackable Managed Switches, 550X Series Stackable Managed Switches, ESW2 Series Advanced Switches. Cisco Bug IDs: CSCvb48377. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100933 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170920-sbms
CVE ID: CVE-2017-6721 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.003Z Vendors: n/a Products: Cisco Wide Area Application Services Problem Types: TCP Fragment Denial of Service Vulnerability Description: A vulnerability in the ingress processing of fragmented TCP packets by Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause the WAASNET process to restart unexpectedly, causing a denial of service (DoS) condition. More Information: CSCvc57428. Known Affected Releases: 6.3(1). Known Fixed Releases: 6.3(0.143) 6.2(3c)6 6.2(3.22). Additional Analyst Notes: - CVE Program Container: References: - https://tools.c
eleases: 6.3(0.143) 6.2(3c)6 6.2(3.22). Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-waas - http://www.securitytracker.com/id/1038747 - http://www.securityfocus.com/bid/99200
CVE ID: CVE-2017-6722 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.163Z Vendors: n/a Products: Cisco Unified Contact Center Express Problem Types: Clear Text Authentication Vulnerability Description: A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) service of Cisco Unified Contact Center Express (UCCx) could allow an unauthenticated, remote attacker to masquerade as a legitimate user, aka a Clear Text Authentication Vulnerability. More Information: CSCuw86638. Known Affected Releases: 10.6(1). Known Fixed Releases: 11.5(1.10000.61). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99
: 11.5(1.10000.61). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99201 - http://www.securitytracker.com/id/1038749 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-ucce
CVE ID: CVE-2017-6724 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.108Z Vendors: n/a Products: Cisco Prime Infrastructure Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65843. Known Affected Releases: 3.1(0.0). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038751 - http://www.securityfocus.com/bid/99203 - https://tools.cisco.com/security/cent
tp://www.securitytracker.com/id/1038751 - http://www.securityfocus.com/bid/99203 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf
CVE ID: CVE-2017-6725 State: PUBLISHED Published: 2017-07-04T00:00:00 Last Updated: 2024-08-05T15:41:17.020Z Vendors: n/a Products: Cisco Prime Infrastructure Problem Types: Cross-Site Scripting Vulnerabilities Description: A vulnerability in the web framework code of Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCuw65833 CSCuw65837. Known Affected Releases: 2.2(2). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038751 - https://tools.cisco.com/security/center/content/CiscoSecurityAdviso
ences: - http://www.securitytracker.com/id/1038751 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170621-piwf1 - http://www.securityfocus.com/bid/99202
CVE ID: CVE-2017-6726 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.572Z Vendors: n/a Products: Cisco Prime Network Gateway Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the CLI of the Cisco Prime Network Gateway could allow an authenticated, local attacker to retrieve system process information, which could lead to the disclosure of confidential information. More Information: CSCvd59341. Known Affected Releases: 4.2(1.0)P1. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-cpn - http://www.securityfocus.com/bid/99456
CVE ID: CVE-2017-6727 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.109Z Vendors: n/a Products: Cisco Wide Area Application Services Problem Types: Denial of Service Vulnerability Description: A vulnerability in the Server Message Block (SMB) protocol of Cisco Wide Area Application Services (WAAS) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device due to a process restarting unexpectedly and creating Core Dump files. More Information: CSCvc63035. Known Affected Releases: 6.2(3a). Known Fixed Releases: 6.3(0.167) 6.2(3c)5 6.2(3.22). Additional Analyst Notes: - CVE Program Container: References:
3a). Known Fixed Releases: 6.3(0.167) 6.2(3c)5 6.2(3.22). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038824 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas - http://www.securityfocus.com/bid/99483
CVE ID: CVE-2017-6728 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.665Z Vendors: n/a Products: Cisco IOS XR Problem Types: Incorrect Permissions Privilege Escalation Vulnerability Description: A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to execute arbitrary code at the root privilege level on an affected system, because of Incorrect Permissions. More Information: CSCvb99389. Known Affected Releases: 6.2.1.BASE. Known Fixed Releases: 6.3.1.15i.BASE 6.2.3.1i.BASE 6.2.2.15i.BASE 6.1.4.10i.BASE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99464 - http://
.BASE. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99464 - http://www.securitytracker.com/id/1038821 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ios
CVE ID: CVE-2017-6729 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.047Z Vendors: n/a Products: Cisco StarOS Problem Types: Denial of Service Vulnerability Description: A vulnerability in the Border Gateway Protocol (BGP) processing functionality of the Cisco StarOS operating system for Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core (VPC) Software could allow an unauthenticated, remote attacker to cause the BGP process on an affected system to reload, resulting in a denial of service (DoS) condition. This vulnerability affects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Ci
fects the following products if they are running the Cisco StarOS operating system and BGP is enabled for the system: Cisco ASR 5000 Series Routers and Cisco Virtualized Packet Core Software. More Information: CSCvc44968. Known Affected Releases: 16.4.1 19.1.0 21.1.0 21.1.M0.65824. Known Fixed Releases: 21.3.A0.65902 21.2.A0.65905 21.1.b0.66164 21.1.V0.66014 21.1.R0.65898 21.1.M0.65894 21.1.0.66030 21.1.0. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100015 - http://www.securitytracker.com/id/1038819 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-staros
CVE ID: CVE-2017-6730 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.087Z Vendors: n/a Products: Cisco Wide Area Application Services Problem Types: Information Disclosure Vulnerability Description: A vulnerability in the web-based GUI of Cisco Wide Area Application Services (WAAS) Central Manager could allow an unauthenticated, remote attacker to retrieve completed reports from an affected system, aka Information Disclosure. This vulnerability affects the following products if they are running an affected release of Cisco Wide Area Application Services (WAAS) Software and are configured to use the Central Manager function: Cisco Virtual Wide Area Applicati
ation Services (WAAS) Software and are configured to use the Central Manager function: Cisco Virtual Wide Area Application Services (vWAAS), Cisco Wide Area Application Services (WAAS) Appliances, Cisco Wide Area Application Services (WAAS) Modules. Only Cisco WAAS products that are configured with the Central Manager role are affected by this vulnerability. More Information: CSCvd87574. Known Affected Releases: 4.4(7) 6.2(1) 6.2(3). Known Fixed Releases: 6.3(0.228) 6.3(0.226) 6.2(3d)8 5.5(7b)17. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99481 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas
curityfocus.com/bid/99481 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-waas1 - http://www.securitytracker.com/id/1038825
CVE ID: CVE-2017-6731 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.106Z Vendors: n/a Products: Cisco IOS XR Problem Types: Denial of Service Vulnerability Description: A vulnerability in Multicast Source Discovery Protocol (MSDP) ingress packet processing for Cisco IOS XR Software could allow an unauthenticated, remote attacker to cause the MSDP session to be unexpectedly reset, causing a short denial of service (DoS) condition. The MSDP session will restart within a few seconds. More Information: CSCvd94828. Known Affected Releases: 4.3.2.MCAST 6.0.2.BASE. Known Fixed Releases: 6.3.1.19i.MCAST 6.2.3.1i.MCAST 6.2.2.17i.MCAST 6.1.4.12i.MCAST. Additional An
.2.MCAST 6.0.2.BASE. Known Fixed Releases: 6.3.1.19i.MCAST 6.2.3.1i.MCAST 6.2.2.17i.MCAST 6.1.4.12i.MCAST. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-iosxr - http://www.securitytracker.com/id/1038820
CVE ID: CVE-2017-6732 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.154Z Vendors: n/a Products: Cisco Prime Network Problem Types: Privilege Escalation Vulnerability Description: A vulnerability in the installation procedure for Cisco Prime Network Software could allow an authenticated, local attacker to elevate their privileges to root privileges. More Information: CSCvd47343. Known Affected Releases: 4.2(2.1)PP1 4.2(3.0)PP6 4.3(0.0)PP4 4.3(1.0)PP2. Known Fixed Releases: 4.3(2). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99457 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cis
es: - http://www.securityfocus.com/bid/99457 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-prime
CVE ID: CVE-2017-6733 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.241Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based application interface of the Cisco Identity Services Engine (ISE) portal could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the web interface of an affected system. More Information: CSCvd87482. Known Affected Releases: 2.1(102.101) 2.2(0.283) 2.3(0.151). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038822 - http://
1). Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1038822 - http://www.securityfocus.com/bid/99458 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ise1
CVE ID: CVE-2017-6734 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.257Z Vendors: n/a Products: Cisco Identity Services Engine Problem Types: Cross-Site Scripting Vulnerability Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an authenticated, remote attacker to conduct a cross-site scripting (XSS) attack against a user of the web interface of an affected device, related to the Guest Portal. More Information: CSCvd74794. Known Affected Releases: 1.3(0.909) 2.1(0.800). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99459 - https:
0.800). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/99459 - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-ise2 - http://www.securitytracker.com/id/1038823
CVE ID: CVE-2017-6735 State: PUBLISHED Published: 2017-07-10T20:00:00 Last Updated: 2024-08-05T15:41:17.290Z Vendors: n/a Products: Cisco FireSIGHT System Software Problem Types: Arbitrary Code Execution Vulnerability Description: A vulnerability in the backup and restore functionality of Cisco FireSIGHT System Software could allow an authenticated, local attacker to execute arbitrary code on a targeted system. More Information: CSCvc91092. Known Affected Releases: 6.2.0 6.2.1. Additional Analyst Notes: - CVE Program Container: References: - https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-FireSIGHT - http://www.securitytracker.com/id/1038826 - http://w
/center/content/CiscoSecurityAdvisory/cisco-sa-20170705-FireSIGHT - http://www.securitytracker.com/id/1038826 - http://www.securityfocus.com/bid/99460
CVE ID: CVE-2017-6736 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:38.056Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco, IntelliShield Products: IOS, Universal Product Problem Types: CWE-119 Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affecte
erabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities. The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and ob
user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload. Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable. There are workarounds that address these vulnerabilities. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content
- CVE Program Container: - CISA ADP Vulnrichment: References: - https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
CVE ID: CVE-2017-6737 State: PUBLISHED Published: 2017-07-17T21:00:00.000Z Last Updated: 2025-10-21T23:55:37.770Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Cisco Products: IOS Problem Types: CWE-119 Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp; The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP rea