Russian State-Sponsored Attackers Exploit Cisco Routers

**Executive Summary:** The advisory describes how CVE-2017-6742, an SNMP buffer overflow in affected Cisco IOS and IOS XE versions, has been exploited by APT28 to deploy the Jaguar Tooth malware that patches authentication functions for backdoor access and performs automated device reconnaissance and TFTP exfiltration; the report lists affected MIBs/versions, device exposure estimates, recommended mitigations (restrict SNMP, monitor hosts, and apply patches), and emphasizes urgent remediation to prevent unauthorized control of routers.