CVE-2017-6742

🗓️ 17 Jul 2017 21:00:00Reported by ciscoType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 679 Views🌐 WEB

Cisco IOS SNMP Subsystem Multiple Vulnerabilities

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios	17 Jan 202619:22	–	githubexploit
ICS	APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers	18 Apr 202312:00	–	ics
ICS	Rockwell Automation Allen-Bradley Stratix and ArmorStratix	27 Jul 201700:00	–	ics
ATTACKERKB	CVE-2017-6742	17 Jul 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of the Simple Network Management Protocol (SNMP) subsystem of the Cisco IOS operating system, which allows a hacker to inject code or trigger a system reboot.	28 Jul 201700:00	–	bdu_fstec
Circl	CVE-2017-6742	23 Apr 202307:46	–	circl
CISA KEV Catalog	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	19 Apr 202300:00	–	cisa_kev
CISA	APT28 Exploits Known Vulnerability To Carry Out Reconnaissance and Deploy Malware on Cisco Routers	18 Apr 202312:00	–	cisa
CISA	CISA Adds One Known Vulnerability to Catalog	19 Apr 202312:00	–	cisa
Tenable Nessus	Cisco IOS SNMP Packet Handling Remote Buffer Overflow Multiple RCE (cisco-sa-20170629-snmp)	7 Jul 201700:00	–	nessus

NVD

Vulners

Node

cisco iosRange12.0–12.4

cisco iosRange15.0–15.6

cisco ios_xeRange2.2.0–3.17

[
  {
    "vendor": "Cisco",
    "product": "Cisco IOS XE Software",
    "versions": [
      {
        "version": "3.7.0S",
        "status": "affected"
      },
      {
        "version": "3.7.1S",
        "status": "affected"
      },
      {
        "version": "3.7.2S",
        "status": "affected"
      },
      {
        "version": "3.7.3S",
        "status": "affected"
      },
      {
        "version": "3.7.4S",
        "status": "affected"
      },
      {
        "version": "3.7.5S",
        "status": "affected"
      },
      {
        "version": "3.7.6S",
        "status": "affected"
      },
      {
        "version": "3.7.7S",
        "status": "affected"
      },
      {
        "version": "3.7.4aS",
        "status": "affected"
      },
      {
        "version": "3.7.2tS",
        "status": "affected"
      },
      {
        "version": "3.7.0bS",
        "status": "affected"
      },
      {
        "version": "3.8.0S",
        "status": "affected"
      },
      {
        "version": "3.8.1S",
        "status": "affected"
      },
      {
        "version": "3.8.2S",
        "status": "affected"
      },
      {
        "version": "3.9.1S",
        "status": "affected"
      },
      {
        "version": "3.9.0S",
        "status": "affected"
      },
      {
        "version": "3.9.2S",
        "status": "affected"
      },
      {
        "version": "3.9.0aS",
        "status": "affected"
      },
      {
        "version": "3.11.1S",
        "status": "affected"
      },
      {
        "version": "3.11.2S",
        "status": "affected"
      },
      {
        "version": "3.11.0S",
        "status": "affected"
      },
      {
        "version": "3.11.3S",
        "status": "affected"
      },
      {
        "version": "3.11.4S",
        "status": "affected"
      },
      {
        "version": "3.12.0S",
        "status": "affected"
      },
      {
        "version": "3.12.1S",
        "status": "affected"
      },
      {
        "version": "3.12.2S",
        "status": "affected"
      },
      {
        "version": "3.12.3S",
        "status": "affected"
      },
      {
        "version": "3.12.0aS",
        "status": "affected"
      },
      {
        "version": "3.12.4S",
        "status": "affected"
      },
      {
        "version": "3.13.0S",
        "status": "affected"
      },
      {
        "version": "3.13.1S",
        "status": "affected"
      },
      {
        "version": "3.13.2S",
        "status": "affected"
      },
      {
        "version": "3.13.3S",
        "status": "affected"
      },
      {
        "version": "3.13.4S",
        "status": "affected"
      },
      {
        "version": "3.13.5S",
        "status": "affected"
      },
      {
        "version": "3.13.2aS",
        "status": "affected"
      },
      {
        "version": "3.13.0aS",
        "status": "affected"
      },
      {
        "version": "3.13.5aS",
        "status": "affected"
      },
      {
        "version": "3.13.6S",
        "status": "affected"
      },
      {
        "version": "3.13.7S",
        "status": "affected"
      },
      {
        "version": "3.13.6aS",
        "status": "affected"
      },
      {
        "version": "3.13.7aS",
        "status": "affected"
      },
      {
        "version": "3.6.3E",
        "status": "affected"
      },
      {
        "version": "3.6.6E",
        "status": "affected"
      },
      {
        "version": "3.6.5bE",
        "status": "affected"
      },
      {
        "version": "3.14.0S",
        "status": "affected"
      },
      {
        "version": "3.14.1S",
        "status": "affected"
      },
      {
        "version": "3.14.2S",
        "status": "affected"
      },
      {
        "version": "3.14.3S",
        "status": "affected"
      },
      {
        "version": "3.14.4S",
        "status": "affected"
      },
      {
        "version": "3.15.0S",
        "status": "affected"
      },
      {
        "version": "3.15.1S",
        "status": "affected"
      },
      {
        "version": "3.15.2S",
        "status": "affected"
      },
      {
        "version": "3.15.1cS",
        "status": "affected"
      },
      {
        "version": "3.15.3S",
        "status": "affected"
      },
      {
        "version": "3.15.4S",
        "status": "affected"
      },
      {
        "version": "3.7.4E",
        "status": "affected"
      },
      {
        "version": "3.7.5E",
        "status": "affected"
      },
      {
        "version": "3.16.0S",
        "status": "affected"
      },
      {
        "version": "3.16.1S",
        "status": "affected"
      },
      {
        "version": "3.16.1aS",
        "status": "affected"
      },
      {
        "version": "3.16.2S",
        "status": "affected"
      },
      {
        "version": "3.16.0cS",
        "status": "affected"
      },
      {
        "version": "3.16.3S",
        "status": "affected"
      },
      {
        "version": "3.16.2bS",
        "status": "affected"
      },
      {
        "version": "3.16.4aS",
        "status": "affected"
      },
      {
        "version": "3.16.4bS",
        "status": "affected"
      },
      {
        "version": "3.16.5S",
        "status": "affected"
      },
      {
        "version": "3.16.4dS",
        "status": "affected"
      },
      {
        "version": "3.17.0S",
        "status": "affected"
      },
      {
        "version": "3.17.1S",
        "status": "affected"
      },
      {
        "version": "3.17.2S",
        "status": "affected"
      },
      {
        "version": "3.17.1aS",
        "status": "affected"
      },
      {
        "version": "3.17.3S",
        "status": "affected"
      },
      {
        "version": "16.2.1",
        "status": "affected"
      },
      {
        "version": "16.2.2",
        "status": "affected"
      },
      {
        "version": "16.3.1",
        "status": "affected"
      },
      {
        "version": "16.3.2",
        "status": "affected"
      },
      {
        "version": "16.3.3",
        "status": "affected"
      },
      {
        "version": "16.3.1a",
        "status": "affected"
      },
      {
        "version": "16.3.4",
        "status": "affected"
      },
      {
        "version": "16.4.1",
        "status": "affected"
      },
      {
        "version": "16.4.2",
        "status": "affected"
      },
      {
        "version": "16.5.1",
        "status": "affected"
      },
      {
        "version": "16.5.1b",
        "status": "affected"
      },
      {
        "version": "3.18.0aS",
        "status": "affected"
      },
      {
        "version": "3.18.0S",
        "status": "affected"
      },
      {
        "version": "3.18.1S",
        "status": "affected"
      },
      {
        "version": "3.18.0SP",
        "status": "affected"
      },
      {
        "version": "3.18.1SP",
        "status": "affected"
      },
      {
        "version": "3.18.1aSP",
        "status": "affected"
      },
      {
        "version": "3.18.2aSP",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "IntelliShield",
    "product": "Universal Product",
    "versions": [
      {
        "version": "N/A",
        "status": "affected"
      }
    ]
  }
]

Source	Link
sec	www.sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
tools	www.tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
securitytracker	www.securitytracker.com/id/1038808
securityfocus	www.securityfocus.com/bid/99345

Parameter	Position	Path	Description	CWE
1.3.6.1.4.1.9.9.95.1.2.4.1.3	path	snmp/161/oid/1.3.6.1.4.1.9.9.95.1.2.4.1.3	Exploitation via crafted SNMP packets targeting the ALPS OID to trigger a stack-based buffer overflow (CVE-2017-6742).	CWE-119
SNMP UDP port 161	path	snmp/161/oid/1.3.6.1.4.1.9.9.95.1.2.4.1.3	Exploitation via crafted SNMP packets targeting the ALPS OID to trigger a stack-based buffer overflow (CVE-2017-6742).	CWE-119
CVE-2017-6742	path	snmp/161/oid/1.3.6.1.4.1.9.9.95.1.2.4.1.3	Exploitation via crafted SNMP packets targeting the ALPS OID to trigger a stack-based buffer overflow (CVE-2017-6742).	CWE-119
running-config	path	tftp/69	Exfiltration of router configuration and state data over TFTP (UDP/69) at intervals.	CWE-119
startup-config	path	tftp/69	Exfiltration of router configuration and state data over TFTP (UDP/69) at intervals.	CWE-119
show version	path	tftp/69	Exfiltration of router configuration and state data over TFTP (UDP/69) at intervals.	CWE-119
show ip int brief	path	tftp/69	Exfiltration of router configuration and state data over TFTP (UDP/69) at intervals.	CWE-119
show arp	path	tftp/69	Exfiltration of router configuration and state data over TFTP (UDP/69) at intervals.	CWE-119
show cdp neighbors	path	tftp/69	Exfiltration of router configuration and state data over TFTP (UDP/69) at intervals.	CWE-119
show ip route	path	tftp/69	Exfiltration of router configuration and state data over TFTP (UDP/69) at intervals.	CWE-119

17 Jun 2026 01:22Current

8.9High risk

Vulners AI Score8.9

CVSS 3.18.8

CVSS 29

CVSS 38.8

EPSS0.21424

SSVC