APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers

🗓️ 18 Apr 2023 12:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 136 Views

APT28 exploits CVE-2017-6742 to deploy malware on Cisco routers in 202

Reporter	Title	Published	Views	Family All 26
GithubExploit	Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios	17 Jan 202619:22	–	githubexploit
ATTACKERKB	CVE-2017-6742	17 Jul 201700:00	–	attackerkb
BDU FSTEC	The vulnerability of the Simple Network Management Protocol (SNMP) subsystem of the Cisco IOS operating system, which allows a hacker to inject code or trigger a system reboot.	28 Jul 201700:00	–	bdu_fstec
Circl	CVE-2017-6742	23 Apr 202307:46	–	circl
CISA KEV Catalog	Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability	19 Apr 202300:00	–	cisa_kev
CISA	APT28 Exploits Known Vulnerability To Carry Out Reconnaissance and Deploy Malware on Cisco Routers	18 Apr 202312:00	–	cisa
CISA	CISA Adds One Known Vulnerability to Catalog	19 Apr 202312:00	–	cisa
Tenable Nessus	Cisco IOS SNMP Packet Handling Remote Buffer Overflow Multiple RCE (cisco-sa-20170629-snmp)	7 Jul 201700:00	–	nessus
Tenable Nessus	Cisco IOS XE SNMP Packet Handling Remote Buffer Overflow Multiple RCE (cisco-sa-20170629-snmp)	7 Jul 201700:00	–	nessus
CNVD	Cisco IOS and IOS XE SNMP Remote Code Execution Vulnerability (CNVD-2017-12530)	2 Jul 201700:00	–	cnvd

Source	Link
facebook	www.facebook.com/sharer/sharer.php
twitter	www.twitter.com/intent/tweet
linkedin	www.linkedin.com/sharing/share-offsite/
	www.
ncsc	www.ncsc.gov.uk/
nsa	www.nsa.gov/
cisa	www.cisa.gov/
fbi	www.fbi.gov/
ncsc	www.ncsc.gov.uk/news/reckless-campaign-cyber-attacks-russian-military-intelligence-service-exposed
gov	www.gov.uk/government/news/uk-enforces-new-sanctions-against-russia-for-cyber-attack-on-german-parliament

18 Apr 2023 12:00Current

9.6High risk

Vulners AI Score9.6

CVSS 3.18.8

CVSS 29

EPSS0.21424

apt28 cisco routers cve-2017-6742 malware reconnaissance snmp protocol ncsc nsa cisa fbi apt28 activity