CVE-2017-6737
Cisco IOS and IOS XE Software: SNMP Remote Code Execution
As of , CVE-2017-6737 in Cisco IOS and IOS XE Software is on CISA's list of exploited vulnerabilities: CISA listed it on . Our patch-first group: Patch soon.
- Exploited
- Yes: CISA listed it on 3 March 2022
- US federal deadline
- 24 March 202221 days after CISA listed it. US federal civilian agencies must fix it by then.
- Used in ransomware campaigns
- Not known to CISA
- EPSS score
- 0.45Higher than 98% of the CVEs EPSS scores. EPSS estimates the chance of exploitation activity in the next 30 days.
- EPSS when listed
- 0.05 on 3 March 2022EPSS on the day CISA listed it.
- Public exploit
- None foundNeither Metasploit nor Exploit-DB lists one.
- Fix
- No vendor link in CISA's entry
What CISA says to do
Apply updates per vendor instructions.
CISA's required action
What the flaw is
The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code.
CISA's description
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.
The CVE record's description, from cisco
- CVE published
- 17 July 2017
- Assigned by
- cisco
- CVSS
- 8.8 High (CVSS 3.0, from the CNA)
- CWE-119
- Improper Restriction of Operations within the Bounds of a Memory Buffer
- CISA SSVC, exploitation
- active
- CISA SSVC, automatable
- no
- CISA SSVC, technical impact
- total
Timeline
- The CVE record was published.
- CISA added it to its list of exploited vulnerabilities.
- The US federal deadline to fix it.
IOS and IOS XE Software: other exploited entries
| Vulnerability | Product | Our group | Listed | Deadline | EPSS |
|---|---|---|---|---|---|
| CVE-2017-6736SNMP Remote Code Execution | Cisco IOS and IOS XE Software | Patch this weekEPSS 0.70 | 0.70 | ||
| CVE-2017-6742SNMP Remote Code Execution | Cisco IOS and IOS XE Software | Patch soon | 0.21 | ||
| CVE-2017-12240DHCP Remote Code Execution | Cisco IOS and IOS XE Software | Patch soon | 0.14 | ||
| CVE-2018-0151IOS Software and Cisco IOS XE Software Quality of Service Remote Code Execution | Cisco IOS and IOS XE Software | Patch soon | 0.14 | ||
| CVE-2017-6738SNMP Remote Code Execution | Cisco IOS and IOS XE Software | Patch soon | 0.11 | ||
| CVE-2017-6739SNMP Remote Code Execution | Cisco IOS and IOS XE Software | Patch soon | 0.11 | ||
| CVE-2017-6740SNMP Remote Code Execution | Cisco IOS and IOS XE Software | Patch soon | 0.11 | ||
| CVE-2017-6743SNMP Remote Code Execution | Cisco IOS and IOS XE Software | Patch soon | 0.11 | ||
| CVE-2017-12237Internet Key Exchange Denial-of-Service | Cisco IOS and IOS XE Software | Patch soon | 0.07 | ||
| CVE-2018-0172Improper Input Validation | Cisco IOS and IOS XE Software | Patch soon | 0.08 |
Read further
- CVE recordcve.org
- NVD entrynvd.nist.gov
- CISA's catalogcisa.gov
- EPSS for this CVEapi.first.org