CVE-2017-6754

A vulnerability in the web-based management interface of the Cisco Smart Net Total Care (SNTC) Software Collector Appliance 3.11 could allow an authenticated, remote attacker to perform a read-only, blind SQL injection attack, which could allow the attacker to compromise the confidentiality of the system through SQL timing attacks. The vulnerability is due to insufficient input validation of certain user-supplied fields that are subsequently used by the affected software to build SQL queries. An attacker could exploit this vulnerability by submitting crafted URLs, which are designed to exploit the vulnerability, to the affected software. To execute an attack successfully, the attacker would need to submit a number of requests to the affected software. A successful exploit could allow the attacker to determine the presence of values in the SQL database of the affected software. Cisco Bug IDs: CSCvf07617.

• CWE-89
• CWE-89

• http://www.securityfocus.com/bid/100126Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf07617Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-sntcVendor Advisory
• http://www.securityfocus.com/bid/100126Third Party Advisory, VDB Entry
• https://quickview.cloudapps.cisco.com/quickview/bug/CSCvf07617Vendor Advisory
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170802-sntcVendor Advisory

Published

Aug 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6748A vulnerability in the CLI parser of the Cisco Web Security …
• CVE-2017-6749A vulnerability in the web-based management interface of Cis…
• CVE-2017-6750A vulnerability in AsyncOS for the Cisco Web Security Applia…
• CVE-2017-6751A vulnerability in the web proxy functionality of the Cisco …7.5
• CVE-2017-6752A vulnerability in the web interface of the Cisco Adaptive S…
• CVE-2017-6753A vulnerability in Cisco WebEx browser extensions for Google…
• CVE-2017-6755A vulnerability in the web portal of the Cisco Prime Collabo…
• CVE-2017-6756A vulnerability in the Web UI Application of the Cisco Prime…
• CVE-2017-6757A vulnerability in Cisco Unified Communications Manager 10.5…
• CVE-2017-6758A vulnerability in the web framework of Cisco Unified Commun…
• CVE-2017-6759A vulnerability in the UpgradeManager of the Cisco Prime Col…
• CVE-2017-6761A vulnerability in the web-based management interface of Cis…