CVE-2017-6739 (CNNVD-201706-1232)
中文标题:
Cisco IOS 缓冲区错误漏洞
英文标题:
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause...
漏洞描述
中文描述:
Cisco IOS是美国思科（Cisco）公司的一套为其网络设备开发的操作系统。 Cisco IOS 12.0版本至12.4版本、15.0版本至15.6版本和IOS XE 2.2版本至3.17版本中的SNMP子系统存在缓冲区错误漏洞。远程攻击者可通过向受影响的系统发送特制的SNMP数据包利用该漏洞在受影响的系统上执行任意代码。以下版本受到影响：SNMP 1版本，2c版本，3版本。
英文描述:
A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device. The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Only traffic directed to the affected system can be used to exploit this vulnerability.
CWE类型:
标签:
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| IntelliShield | Universal Product | N/A | - | - |
cpe:2.3:a:intellishield:universal_product:n_a:*:*:*:*:*:*:*
|
| cisco | ios | * | - | - |
cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*
|
| cisco | ios_xe | * | - | - |
cpe:2.3:o:cisco:ios_xe:*:*:*:*:*:*:*:*
|
解决方案
中文解决方案:
英文解决方案:
临时解决方案:
CVSS评分详情
3.0 (cna)
HIGHCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
时间信息
利用信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2017-6739 |
2025-11-11 15:19:31 | 2025-11-11 07:34:51 |
| NVD | nvd_CVE-2017-6739 |
2025-11-11 14:55:29 | 2025-11-11 07:43:28 |
| CNNVD | cnnvd_CNNVD-201706-1232 |
2025-11-11 15:12:30 | 2025-11-11 07:53:04 |
版本与语言
安全公告
变更历史
查看详细变更
- vulnerability_type: 未提取 -> 缓冲区错误
- cnnvd_id: 未提取 -> CNNVD-201706-1232
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
查看详细变更
- affected_products_count: 1 -> 3
- references_count: 1 -> 5
- data_sources: ['cve'] -> ['cve', 'nvd']