CVE-2017-6754 SQL injection in Cisco Smart Net Total Care Software Collector Appliance
Authenticated attackers can exploit blind SQL injection in the Cisco SNTC Collector to read database values via timing attacks.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-6754?
CVE-2017-6754 is a medium-severity SQL injection vulnerability in Cisco Smart Net Total Care Software Collector Appliance, published on 7 Aug 2017. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the system through SQL timing attacks. The vulnerability is due to insufficient input validation of certain user-supplied fields that are subsequently used by the affected software to build SQL queries. An attacker could exploit this vulnerability by submitting crafted URLs, which are designed to exploit the vulnerability, to the affected software. To execute an attack successfully, the attacker would need to submit a number of requests to the affected software. A successful exploit could allow the attacker to determine the presence of values in the SQL database of the affected software. Cisco Bug IDs: CSCvf07617.
Weakness: CWE-89
Which versions are affected by CVE-2017-6754?
It affects 1 product.
Products include Cisco Smart Net Total Care Collector Appliance.
How do I fix CVE-2017-6754?
No fix has been published for CVE-2017-6754 yet. Limit exposure of the affected software until one is available.
Use parameterised queries everywhere and never build SQL by joining strings. Upgrade affected software first; a web application firewall only buys time. More about SQL injection.
Is CVE-2017-6754 being exploited?
There is no known exploitation of CVE-2017-6754 in the wild and no public exploit code.
Sources
Also known as GHSA-q495-r299-hh55.