Cisco IOS and IOS XE Software Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	99345
Class:	Input Validation Error
CVE:	CVE-2017-6736 CVE-2017-6737 CVE-2017-6738 CVE-2017-6739 CVE-2017-6740 CVE-2017-6741 CVE-2017-6742 CVE-2017-6743 CVE-2017-6744
Remote:	Yes
Local:	No
Published:	Jun 29 2017 12:00AM
Updated:	Jun 29 2017 12:00AM
Credit:	Cisco.
Vulnerable:	Cisco IOS XE 0 Cisco IOS 0
Not Vulnerable:

Cisco IOS and IOS XE Software Multiple Remote Code Execution Vulnerabilities

Cisco IOS and IOS XE Software are prone to multiple remote code-execution vulnerabilities.

An attacker can exploit this issue to execute arbitrary code in the context of an affected system. Failed exploit attempts may result in a denial of service condition; this can result in the attacker gaining complete control of the affected system.

These issues are being tracked by Cisco Bug IDs-CSCve54313,CSCve57697,CSCve60276,CSCve60376,CSCve60402,CSCve60507,CSCve66540,CSCve66601,CSCve66658,CSCve78027,CSCve89865.

Cisco IOS and IOS XE Software Multiple Remote Code Execution Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Cisco IOS and IOS XE Software Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Cisco IOS and IOS XE Software Multiple Remote Code Execution Vulnerabilities

References:

• Cisco Homepage (Cisco)
  
• cisco-sa-20170629-snmp:SNMP Remote Code Execution Vulnerabilities in Cisco IOS a (Cisco)
  
• ICSA-17-208-04:Rockwell Automation Allen-Bradley Stratix and ArmoStratix (CERT)