Known exploited vulnerability
CVE-2017-6737
The short answer
CVE-2017-6737 affects Cisco IOS and is rated high (CVSS 8.8). CISA added it to the Known Exploited Vulnerabilities catalog on 2022-03-03: attackers are using it, so patch it first.
What it is
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.
Weakness: CWE-119.
Severity
8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploited (CISA KEV)
Yes, since Mar 3, 2022
Federal due date Mar 24, 2022
EPSS, next 30 days
45%
Higher than 99% of scored CVEs
How it can be exploited
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality impact
- High
- Integrity impact
- High
- Availability impact
- High
What CISA says to do
Apply updates per vendor instructions.
Affected products
IOS. NVD's record lists the exact affected versions.
References
- sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp Vendor Advisory
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6737 US Government Resource
Questions
Is CVE-2017-6737 being exploited?
Yes. CISA added CVE-2017-6737 to its Known Exploited Vulnerabilities catalog on 2022-03-03, with a federal remediation due date of 2022-03-24.
How do I fix CVE-2017-6737?
CISA's required action: Apply updates per vendor instructions.
From NVD, CISA KEV, FIRST EPSS and OSV.dev, checked . Status on NVD: Analyzed. The description is NVD's text, quoted as published.
Related
Latest CVEs this week
Critical and High CVEs from the last 7 days, with KEV and EPSS.
Exploited vulnerabilities by vendor
Every vendor in CISA's KEV catalog, with its count.
Cisco exploited vulnerabilities
Everything CISA lists as exploited for Cisco.
Vulnerability watch
A briefing and a fix pull request when an advisory hits your dependencies.
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.