CVE-2017-6741
Last modified
CVE-2017-6741 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a buffer overflow in the affected code area. EPSS estimates a 6.35% chance of exploitation in the next 30 days.
Description
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.
Metrics
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cisco | Ios Xe | 2.2.0 |
| Cisco | Ios Xe | 2.2.1 |
| Cisco | Ios Xe | 2.2.2 |
| Cisco | Ios Xe | 2.2.3 |
| Cisco | Ios Xe | 2.3.0 |
| Cisco | Ios Xe | 2.3.1 |
| Cisco | Ios Xe | 2.3.1t |
| Cisco | Ios Xe | 2.3.2 |
| Cisco | Ios Xe | 2.4.0 |
| Cisco | Ios Xe | 2.4.1 |
| Cisco | Ios Xe | 2.4.2 |
| Cisco | Ios Xe | 2.4.3 |
| Cisco | Ios Xe | 2.5.0 |
| Cisco | Ios Xe | 2.5.1 |
| Cisco | Ios Xe | 2.6.0 |
| Cisco | Ios Xe | 2.6.1 |
| Cisco | Ios Xe | 3.1.0s |
| Cisco | Ios Xe | 3.1.1s |
| Cisco | Ios Xe | 3.1.2s |
| Cisco | Ios Xe | 3.1.3as |
| Cisco | Ios Xe | 3.1.4as |
| Cisco | Ios Xe | 3.1.4s |
| Cisco | Ios Xe | 3.2.0s |
| Cisco | Ios Xe | 3.2.0se |
| Cisco | Ios Xe | 3.2.1s |
| Cisco | Ios Xe | 3.2.2s |
| Cisco | Ios Xe | 3.3.0s |
| Cisco | Ios Xe | 3.3.0se |
| Cisco | Ios Xe | 3.3.1s |
| Cisco | Ios Xe | 3.3.2s |
| Cisco | Ios Xe | 3.4.0as |
| Cisco | Ios Xe | 3.4.0s |
| Cisco | Ios Xe | 3.4.1s |
| Cisco | Ios Xe | 3.4.2s |
| Cisco | Ios Xe | 3.4.3s |
| Cisco | Ios Xe | 3.4.4s |
| Cisco | Ios Xe | 3.4.5s |
| Cisco | Ios Xe | 3.4.6s |
| Cisco | Ios Xe | 3.5.0s |
| Cisco | Ios Xe | 3.5.1s |
| Cisco | Ios Xe | 3.5.2s |
| Cisco | Ios Xe | 3.6.0s |
| Cisco | Ios Xe | 3.6.1s |
| Cisco | Ios Xe | 3.6.2s |
| Cisco | Ios Xe | 3.7.0s |
| Cisco | Ios Xe | 3.7.1s |
| Cisco | Ios Xe | 3.7.2s |
| Cisco | Ios Xe | 3.7.3s |
| Cisco | Ios Xe | 3.7.4as |
| Cisco | Ios Xe | 3.7.4s |
Showing 50 of 112 affected configurations. See NVD for the full list.
References
- http://www.securityfocus.com/bid/99345Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1038808Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-6741?
How severe is CVE-2017-6741?
How do I fix CVE-2017-6741?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-6735A vulnerability in the backup and restore functionality of C…
- CVE-2017-6736The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6737A vulnerability in the SNMP implementation of could allow an…8.8
- CVE-2017-6738The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6739A vulnerability in the SNMP implementation of could allow an…8.8
- CVE-2017-6740The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6742A vulnerability in the SNMP implementation of could allow an…8.8
- CVE-2017-6743The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6744The Simple Network Management Protocol (SNMP) subsystem of C…8.8
- CVE-2017-6745A vulnerability in the cache server within Cisco Videoscape …
- CVE-2017-6746A vulnerability in the web interface of the Cisco Web Securi…
- CVE-2017-6747A vulnerability in the authentication module of Cisco Identi…
Are you affected by CVE-2017-6741?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
