Cisco-IOS-Exploitation-JAGUAR_TOOTH-CVE-2017-6742-Reconstruction

= doi.org/10.5281/zenodo.18283540 = orcid.org/0009-0007-7728-256X README.md 🐆 JAGUARTOOTH 分析と研究 APT28/Fancy Bear -blue?style=for-the-badge 📑 概要 JAGUARTOOTH マルウェアの包括的な分析と技術的再構築。これは脅威アクター APT28（GRU Unit 74455）に帰属される非永続的なサイバー諜報ツールです。このリポジトリは、サイバーセキュリティ研究、脅威ハンティング、および重要インフラ防衛の開発に特化しています。 --- 🛠 技術詳細 1...

CVE-2017-6742

creationtimestamp| type| source ---|---|--- 2023-04-23 07:46:30+00:00| exploited| https://t.me/SecLabNews/13650 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 02:55:04+00:00| seen| https://t.me/arpsyndicate/1097 2024-12-24 20:34:15+00:00| seen|...

U.S. and U.K. Warn of Russian Hackers Exploiting Cisco Router Flaws for Espionage

U.K. and U.S. cybersecurity and intelligence agencies have warned of Russian nation-state actors exploiting now-patched flaws in networking equipment from Cisco to conduct reconnaissance and deploy malware against select targets. The intrusions, per the authorities, took place in 2021 and targete...

APT28 Exploits Known Vulnerability to Carry Out Reconnaissance and Deploy Malware on Cisco Routers

APT28 accesses poorly maintained Cisco routers and deploys malware on unpatched devices using CVE-2017-6742. Overview and Context The UK National Cyber Security Centre NCSC, the US National Security Agency NSA, US Cybersecurity and Infrastructure Security Agency CISA and US Federal Bureau of...

CVE-2017-6742

CVE-2017-6742 is a Cisco SNMP remote code execution vulnerability in the SNMP stack of IOS/IOS XE. A stack-based overflow could allow an authenticated attacker to run arbitrary code or cause a reload by sending crafted SNMP packets (targets SNMP v1/v2c/v3; needs read-only community string or v3 c...

CVE-2017-6742

A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a...

SNMP Remote Code Execution Vulnerabilities in Cisco IOS Software (cisco-sa-20170629-snmp)

The Simple Network Management Protocol SNMP subsystem of Cisco IOS Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by...