CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution
Authenticated remote attackers can trigger a buffer overflow in SNMP to execute arbitrary code or cause a system reload on Cisco IOS XE devices.
- Exploited in the wild
- Since 19 Apr 2023
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6742?
CVE-2017-6742 is a high-severity memory corruption vulnerability in Cisco Ios, published on 17 Jul 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.
Weakness: CWE-119
Which versions are affected by CVE-2017-6742?
It affects 2 products.
Products include Cisco Ios, Cisco Ios Xe.
How do I fix CVE-2017-6742?
No fix has been published for CVE-2017-6742 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 10 May 2023.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-6742 being exploited?
Yes. Attackers have exploited CVE-2017-6742 in the wild since at least 19 Apr 2023.
Public exploit code: 1 proofs of concept on GitHub.
Other vulnerabilities in Cisco Ios
- CVE-2017-12240 Cisco IOS and IOS XE Software DHCP Remote Code Execution
- CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution
- CVE-2018-0167 Cisco IOS, XR, and XE Software Buffer Overflow
- CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution
- CVE-2017-6737 Cisco IOS and IOS XE Software SNMP Remote Code Execution
Sources
Also known as GHSA-cw5p-gwrw-rv56.