Known exploited vulnerability
CVE-2017-6742
The short answer
CVE-2017-6742 affects Cisco Cisco IOS XE Software and is rated high (CVSS 8.8). CISA added it to the Known Exploited Vulnerabilities catalog on 2023-04-19: attackers are using it, so patch it first.
What it is
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.
Weakness: CWE-119.
Severity
8.8 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploited (CISA KEV)
Yes, since Apr 19, 2023
Federal due date May 10, 2023
EPSS, next 30 days
21%
Higher than 98% of scored CVEs
How it can be exploited
- Attack vector
- Network
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality impact
- High
- Integrity impact
- High
- Availability impact
- High
What CISA says to do
Apply updates per vendor instructions.
Affected products
Cisco IOS XE Software, Universal Product. NVD's record lists the exact affected versions.
References
- sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp Vendor Advisory
- tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp Vendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6742 US Government Resource
Questions
Is CVE-2017-6742 being exploited?
Yes. CISA added CVE-2017-6742 to its Known Exploited Vulnerabilities catalog on 2023-04-19, with a federal remediation due date of 2023-05-10.
How do I fix CVE-2017-6742?
CISA's required action: Apply updates per vendor instructions.
From NVD, CISA KEV, FIRST EPSS and OSV.dev, checked . Status on NVD: Analyzed. The description is NVD's text, quoted as published.
Related
Latest CVEs this week
Critical and High CVEs from the last 7 days, with KEV and EPSS.
Exploited vulnerabilities by vendor
Every vendor in CISA's KEV catalog, with its count.
Cisco exploited vulnerabilities
Everything CISA lists as exploited for Cisco.
Vulnerability watch
A briefing and a fix pull request when an advisory hits your dependencies.
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.