cisco ios CVE-2017-6742 vulnerability in Cisco Products
Published on July 17, 2017

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.  The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.

NVD

Known Exploited Vulnerability

This Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability is part of CISA's list of Known Exploited Vulnerabilities. The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

The following remediation steps are recommended / required by May 10, 2023: Apply updates per vendor instructions.

Weakness Type

What is a Buffer Overflow Vulnerability?

The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.

CVE-2017-6742 has been classified to as a Buffer Overflow vulnerability or weakness.


Products Associated with CVE-2017-6742

stack.watch emails you whenever new vulnerabilities are published in Cisco Internetwork Operating System (IOS) or Cisco IOS XE. Just hit a watch button to start following.

Cisco Internetwork Operating System (IOS)
 
Cisco IOS XE
 

Affected Versions

Cisco IOS XE Software: IntelliShield Universal Product:

Exploit Probability

EPSS
5.56%
Percentile
90.14%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.