Skip to content

CVE-2017-6742 A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnera...

HighCVSS 8.8 EPSS 21.3% CISA KEV added 2023-04-19 · due 2023-05-10 Exploited in the wild
Published
Updated
Exploit status
Exploited in the wild (confirmed)
Sign in for asset impact Search another CVE

Description

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. 

The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.

Only traffic directed to the affected system can be used to exploit this vulnerability.

CISA Known Exploited Vulnerability

Date added
2023-04-19
Due date (FCEB)
2023-05-10
Ransomware use
Unknown

Required action

Apply updates per vendor instructions.

Affected products

ProductAffected versionsFixed in
cisco ios >= 12.0, <= 12.4 No fix listed
cisco ios >= 15.0, <= 15.6 No fix listed
cisco ios xe >= 2.2.0, <= 3.17 No fix listed
Cisco IOS XE Software = 3.7.0S No fix listed
Cisco IOS XE Software = 3.7.1S No fix listed
Cisco IOS XE Software = 3.7.2S No fix listed
Cisco IOS XE Software = 3.7.3S No fix listed
Cisco IOS XE Software = 3.7.4S No fix listed
Cisco IOS XE Software = 3.7.5S No fix listed
Cisco IOS XE Software = 3.7.6S No fix listed
Cisco IOS XE Software = 3.7.7S No fix listed
Cisco IOS XE Software = 3.7.4aS No fix listed
Cisco IOS XE Software = 3.7.2tS No fix listed
Cisco IOS XE Software = 3.7.0bS No fix listed
Cisco IOS XE Software = 3.8.0S No fix listed
Cisco IOS XE Software = 3.8.1S No fix listed
Cisco IOS XE Software = 3.8.2S No fix listed
Cisco IOS XE Software = 3.9.1S No fix listed
Cisco IOS XE Software = 3.9.0S No fix listed
Cisco IOS XE Software = 3.9.2S No fix listed
Cisco IOS XE Software = 3.9.0aS No fix listed
Cisco IOS XE Software = 3.11.1S No fix listed
Cisco IOS XE Software = 3.11.2S No fix listed
Cisco IOS XE Software = 3.11.0S No fix listed
Cisco IOS XE Software = 3.11.3S No fix listed
Show 71 more
ProductAffected versionsFixed in
Cisco IOS XE Software = 3.11.4S No fix listed
Cisco IOS XE Software = 3.12.0S No fix listed
Cisco IOS XE Software = 3.12.1S No fix listed
Cisco IOS XE Software = 3.12.2S No fix listed
Cisco IOS XE Software = 3.12.3S No fix listed
Cisco IOS XE Software = 3.12.0aS No fix listed
Cisco IOS XE Software = 3.12.4S No fix listed
Cisco IOS XE Software = 3.13.0S No fix listed
Cisco IOS XE Software = 3.13.1S No fix listed
Cisco IOS XE Software = 3.13.2S No fix listed
Cisco IOS XE Software = 3.13.3S No fix listed
Cisco IOS XE Software = 3.13.4S No fix listed
Cisco IOS XE Software = 3.13.5S No fix listed
Cisco IOS XE Software = 3.13.2aS No fix listed
Cisco IOS XE Software = 3.13.0aS No fix listed
Cisco IOS XE Software = 3.13.5aS No fix listed
Cisco IOS XE Software = 3.13.6S No fix listed
Cisco IOS XE Software = 3.13.7S No fix listed
Cisco IOS XE Software = 3.13.6aS No fix listed
Cisco IOS XE Software = 3.13.7aS No fix listed
Cisco IOS XE Software = 3.6.3E No fix listed
Cisco IOS XE Software = 3.6.6E No fix listed
Cisco IOS XE Software = 3.6.5bE No fix listed
Cisco IOS XE Software = 3.14.0S No fix listed
Cisco IOS XE Software = 3.14.1S No fix listed
Cisco IOS XE Software = 3.14.2S No fix listed
Cisco IOS XE Software = 3.14.3S No fix listed
Cisco IOS XE Software = 3.14.4S No fix listed
Cisco IOS XE Software = 3.15.0S No fix listed
Cisco IOS XE Software = 3.15.1S No fix listed
Cisco IOS XE Software = 3.15.2S No fix listed
Cisco IOS XE Software = 3.15.1cS No fix listed
Cisco IOS XE Software = 3.15.3S No fix listed
Cisco IOS XE Software = 3.15.4S No fix listed
Cisco IOS XE Software = 3.7.4E No fix listed
Cisco IOS XE Software = 3.7.5E No fix listed
Cisco IOS XE Software = 3.16.0S No fix listed
Cisco IOS XE Software = 3.16.1S No fix listed
Cisco IOS XE Software = 3.16.1aS No fix listed
Cisco IOS XE Software = 3.16.2S No fix listed
Cisco IOS XE Software = 3.16.0cS No fix listed
Cisco IOS XE Software = 3.16.3S No fix listed
Cisco IOS XE Software = 3.16.2bS No fix listed
Cisco IOS XE Software = 3.16.4aS No fix listed
Cisco IOS XE Software = 3.16.4bS No fix listed
Cisco IOS XE Software = 3.16.5S No fix listed
Cisco IOS XE Software = 3.16.4dS No fix listed
Cisco IOS XE Software = 3.17.0S No fix listed
Cisco IOS XE Software = 3.17.1S No fix listed
Cisco IOS XE Software = 3.17.2S No fix listed
Cisco IOS XE Software = 3.17.1aS No fix listed
Cisco IOS XE Software = 3.17.3S No fix listed
Cisco IOS XE Software = 16.2.1 No fix listed
Cisco IOS XE Software = 16.2.2 No fix listed
Cisco IOS XE Software = 16.3.1 No fix listed
Cisco IOS XE Software = 16.3.2 No fix listed
Cisco IOS XE Software = 16.3.3 No fix listed
Cisco IOS XE Software = 16.3.1a No fix listed
Cisco IOS XE Software = 16.3.4 No fix listed
Cisco IOS XE Software = 16.4.1 No fix listed
Cisco IOS XE Software = 16.4.2 No fix listed
Cisco IOS XE Software = 16.5.1 No fix listed
Cisco IOS XE Software = 16.5.1b No fix listed
Cisco IOS XE Software = 3.18.0aS No fix listed
Cisco IOS XE Software = 3.18.0S No fix listed
Cisco IOS XE Software = 3.18.1S No fix listed
Cisco IOS XE Software = 3.18.0SP No fix listed
Cisco IOS XE Software = 3.18.1SP No fix listed
Cisco IOS XE Software = 3.18.1aSP No fix listed
Cisco IOS XE Software = 3.18.2aSP No fix listed
IntelliShield Universal Product All versions No fix listed

References