Is CVE-2017-6742 actively exploited?

Yes. CVE-2017-6742 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2017-6742 be exploited remotely?

The attack vector of CVE-2017-6742 has not been classified yet.

What is the CVSS score of CVE-2017-6742?

CVE-2017-6742 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2017-6742

HIGHCISA KEVIN THE WILD

CVE-2017-6742

Published: April 19, 2023

EPSS:5.70%probability of exploitation in 30 daysPercentile:90.2th

Official Description

The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE contains a vulnerability that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload.

NVD Source

CISA KEV Advisory

Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

Added to KEV: 2023-04-19Federal patch deadline: 2023-05-10

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

A vulnerability in the SNMP subsystem of Cisco IOS and IOS XE could allow an authenticated, remote attacker to execute code or cause a system reload. The high EPSS score of 0.05704 indicates a significant likelihood of exploitation, and its presence in CISA's KEV confirms active exploitation.

This vulnerability is actively being exploited in the wild. It is remotely exploitable by an authenticated attacker.

Recommended Action

It is crucial to apply the latest security updates for Cisco IOS and IOS XE to mitigate this vulnerability. Additionally, ensure proper authentication and access controls are in place for SNMP.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2017-6742 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2017-6742 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.