deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2017-7682
Published: 2017-07-17
Description: Apache OpenMeetings 3.2.0 is vulnerable to parameter manipulation attacks, as a result attacker has access to restricted areas.
CVSS Score: 8.2 (HIGH)
References: http://markmail.org/message/dbrbvf5k343ulivf; http://markmail.org/message/dbrbvf5k343ulivf
CVE: CVE-2017-7683
Published: 2017-07-17
Description: Apache OpenMeetings 1.0.0 displays Tomcat version and detailed error stack trace, which is not secure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://markmail.org/message/hint6fp66lijqdvu; http://markmail.org/message/hint6fp66lijqdvu
CVE: CVE-2017-7684
Published: 2017-07-17
Description: Apache OpenMeetings 1.0.0 doesn't check contents of files being uploaded. An attacker can cause a denial of service by uploading multiple large files to the server.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://markmail.org/message/v6dpmrdd6cgg66up; http://www.securityfocus.com/bid/99584; http://markmail.org/message/v6dpmrdd6cgg66up
CVE: CVE-2017-7685
Published: 2017-07-17
Description: Apache OpenMeetings 1.0.0 responds to the following insecure HTTP methods: PUT, DELETE, HEAD, and PATCH.
CVSS Score: 5.3 (MEDIUM)
References: http://markmail.org/message/uxk4bpq35svnyjhb; http://www.securityfocus.com/bid/99592; http://markmail.org/message/uxk4bpq35svnyjhb
CVE: CVE-2017-7688
Published: 2017-07-17
Description: Apache OpenMeetings 1.0.0 updates user password in insecure manner.
CVSS Score: 7.5 (HIGH)
References: http://markmail.org/message/ctsiiqtekzsun6fi; http://www.securityfocus.com/bid/99586; http://markmail.org/message/ctsiiqtekzsun6fi
CVE: CVE-2017-9814
Published: 2017-07-17
Description: cairo-truetype-subset.c in cairo 1.15.6 and earlier allows remote attackers to cause a denial of service (out-of-bounds read) because of mishandling of an unexpected malloc(0) call.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00042.html; https://bugs.freedesktop.org/show_bug.cgi?id=101547; https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
CVE: CVE-2017-9951
Published: 2017-07-17
Description: The try_read_command function in memcached.c in memcached before 1.4.39 allows remote attackers to cause a denial of service (segmentation fault) via a request to add/set a key, which makes a comparison between signed and unsigned int and triggers a heap-based buffer over-read. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-8705.
CVSS Score: 7.5 (HIGH)
References: http://www.securityfocus.com/bid/99874; https://github.com/memcached/memcached/wiki/ReleaseNotes1439; https://groups.google.com/forum/message/raw?msg=memcached/ubGWrkmrr4E/nrm1SeVJAQAJ
CVE: CVE-2017-8000
Published: 2017-07-17
Description: In EMC RSA Authentication Manager 8.2 SP1 and earlier, a malicious RSA Security Console Administrator could craft a token profile and store the profile name in the RSA Authentication Manager database. The profile name could include a crafted script (with an XSS payload) that could be executed when viewing or editing the assigned token profile in the token by another administrator's browser session.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Jul/25; http://www.securityfocus.com/bid/99572; http://www.securitytracker.com/id/1038878
CVE: CVE-2017-8004
Published: 2017-07-17
Description: The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) allow an application administrator to upload arbitrary files that may potentially contain a malicious code. The malicious file could be then executed on the affected system with the privileges of the user the application is running under.
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://seclists.org/fulldisclosure/2017/Jul/24; http://www.securityfocus.com/bid/99591; http://www.securitytracker.com/id/1038877
CVE: CVE-2017-8005
Published: 2017-07-17
Description: The EMC RSA Identity Governance and Lifecycle, RSA Via Lifecycle and Governance, and RSA IMG products (RSA Identity Governance and Lifecycle versions 7.0.1, 7.0.2, all patch levels; RSA Via Lifecycle and Governance version 7.0, all patch levels; RSA Identity Management and Governance (RSA IMG) versions 6.9.1, all patch levels) are affected by multiple stored cross-site scripting vulnerabilities. Remote authenticated malicious users could potentially inject arbitrary HTML code to the application.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2017/Jul/24; http://www.securityfocus.com/bid/99591; http://www.securitytracker.com/id/1038877
CVE: CVE-2017-8006
Published: 2017-07-17
Description: In EMC RSA Authentication Manager 8.2 SP1 Patch 1 and earlier, a malicious user logged into the Self-Service Console of RSA Authentication Manager as a target user can use a brute force attack to attempt to identify that user's PIN. The malicious user could potentially reset the compromised PIN to affect victim's ability to obtain access to protected resources.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-287
References: http://seclists.org/fulldisclosure/2017/Jul/23; http://www.securityfocus.com/bid/99554; http://www.securitytracker.com/id/1038879
CVE: CVE-2017-8011
Published: 2017-07-17
Description: EMC ViPR SRM, EMC Storage M&R, EMC VNX M&R, EMC M&R for SAS Solution Packs (EMC ViPR SRM prior to 4.1, EMC Storage M&R prior to 4.1, EMC VNX M&R all versions, EMC M&R (Watch4Net) for SAS Solution Packs all versions) contain undocumented accounts with default passwords for Webservice Gateway and RMI JMX components. A remote attacker with the knowledge of the default password may potentially use these accounts to run arbitrary web service and remote procedure calls on the affected system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: http://seclists.org/fulldisclosure/2017/Jul/21; http://www.securityfocus.com/bid/99555; http://www.securitytracker.com/id/1038905
CVE: CVE-2017-8034
Published: 2017-07-17
Description: The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do not validate the issuer on JSON Web Tokens (JWTs) from UAA. With certain multi-zone UAA configurations, zone administrators are able to escalate their privileges.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-565
References: https://www.cloudfoundry.org/cve-2017-8034/; https://www.cloudfoundry.org/cve-2017-8034/
CVE: CVE-2010-0771
Published: 2017-07-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2010-3552.  Reason: This candidate is a reservation duplicate of CVE-2010-3552.  Notes: All CVE users should reference CVE-2010-3552 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2017-10988
Published: 2017-07-17
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate was withdrawn by its CNA.  Further investigation showed that it was not a security issue.  Notes: none
CVE: CVE-2017-11367
Published: 2017-07-17
Description: The shoco_decompress function in the API in shoco through 2017-07-17 allows remote attackers to cause a denial of service (buffer over-read and application crash) via malformed compressed data.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://github.com/Ed-von-Schleck/shoco/issues/28; https://github.com/Ed-von-Schleck/shoco/issues/28
CVE: CVE-2017-10978
Published: 2017-07-17
Description: An FR-GV-201 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "Read / write overflow in make_secret()" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99893
CVE: CVE-2017-10979
Published: 2017-07-17
Description: An FR-GV-202 issue in FreeRADIUS 2.x before 2.2.10 allows "Write overflow in rad_coalesce()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99901
CVE: CVE-2017-10980
Published: 2017-07-17
Description: An FR-GV-203 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in decode_tlv()" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99905
CVE: CVE-2017-10981
Published: 2017-07-17
Description: An FR-GV-204 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Memory leak in fr_dhcp_decode()" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-772
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99898
CVE: CVE-2017-10982
Published: 2017-07-17
Description: An FR-GV-205 issue in FreeRADIUS 2.x before 2.2.10 allows "DHCP - Buffer over-read in fr_dhcp_decode_options()" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99912
CVE: CVE-2017-10983
Published: 2017-07-17
Description: An FR-GV-206 issue in FreeRADIUS 2.x before 2.2.10 and 3.x before 3.0.15 allows "DHCP - Read overflow when decoding option 63" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-119
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99915
CVE: CVE-2017-10984
Published: 2017-07-17
Description: An FR-GV-301 issue in FreeRADIUS 3.x before 3.0.15 allows "Write overflow in data2vp_wimax()" - this allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99876
CVE: CVE-2017-10985
Published: 2017-07-17
Description: An FR-GV-302 issue in FreeRADIUS 3.x before 3.0.15 allows "Infinite loop and memory exhaustion with 'concat' attributes" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99968
CVE: CVE-2017-10986
Published: 2017-07-17
Description: An FR-GV-303 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Infinite read in dhcp_attr2vp()" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-835
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99971
CVE: CVE-2017-10987
Published: 2017-07-17
Description: An FR-GV-304 issue in FreeRADIUS 3.x before 3.0.15 allows "DHCP - Buffer over-read in fr_dhcp_decode_suboptions()" and a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: http://freeradius.org/security/fuzzer-2017.html; http://www.debian.org/security/2017/dsa-3930; http://www.securityfocus.com/bid/99970
CVE: CVE-2017-11361
Published: 2017-07-17
Description: Inteno routers have a JUCI ACL misconfiguration that allows the "user" account to read files, write to files, and add root SSH keys via JSON commands to ubus. (Exploitation is sometimes easy because the "user" password might be "user" or might match the Wi-Fi key.)
CVSS Score: 8.8 (HIGH)
CWE: CWE-269
References: https://neonsea.uk/blog/2017/07/17/cve-2017-11361.html; https://neonsea.uk/blog/2017/07/17/cve-2017-11361.html
CVE: CVE-2017-2642
Published: 2017-07-17
Description: Moodle 3.x has user fullname disclosure on the user preferences page.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99606; https://moodle.org/mod/forum/discuss.php?d=355554; http://www.securityfocus.com/bid/99606
CVE: CVE-2017-7531
Published: 2017-07-17
Description: In Moodle 3.3, the course overview block reveals activities in hidden courses.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/99618; https://moodle.org/mod/forum/discuss.php?d=355555; http://www.securityfocus.com/bid/99618
CVE: CVE-2017-7532
Published: 2017-07-17
Description: In Moodle 3.x, course creators are able to change system default settings for courses.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-269
References: http://www.securityfocus.com/bid/99617; https://moodle.org/mod/forum/discuss.php?d=355556; http://www.securityfocus.com/bid/99617
CVE: CVE-2017-11127
Published: 2017-07-17
Description: Bolt CMS 3.2.14 allows stored XSS by uploading an SVG document with a "Content-Type: image/svg+xml" header.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html; https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html
CVE: CVE-2017-11128
Published: 2017-07-17
Description: Bolt CMS 3.2.14 allows stored XSS via text input, as demonstrated by the Title field of a New Entry.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html; https://websecnerd.blogspot.in/2017/07/bolt-cms-3.html
CVE: CVE-2017-11399
Published: 2017-07-17
Description: Integer overflow in the ape_decode_frame function in libavcodec/apedec.c in FFmpeg 2.4 through 3.3.2 allows remote attackers to cause a denial of service (out-of-array access and application crash) or possibly have unspecified other impact via a crafted APE file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: http://www.debian.org/security/2017/dsa-3957; http://www.securityfocus.com/bid/100019; https://github.com/FFmpeg/FFmpeg/commit/96349da5ec8eda9f0368446e557fe0c8ba0e66b7
CVE: CVE-2017-3742
Published: 2017-07-17
Description: In Lenovo Connect2 versions earlier than 4.2.5.4885 for Windows and 4.2.5.3071 for Android, when an ad-hoc connection is made between two systems for the purpose of sharing files, the password for this ad-hoc connection will be stored in a user-readable location. An attacker with read access to the user's contents could connect to the Connect2 hotspot and see the contents of files while they are being transferred between the two systems.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-200
References: https://support.lenovo.com/us/en/product_security/LEN-14398; https://support.lenovo.com/us/en/product_security/LEN-14398
CVE: CVE-2017-3754
Published: 2017-07-17
Description: Some Lenovo brand notebook systems do not have write protections properly configured in the system BIOS. This could enable an attacker with physical or administrative access to a system to be able to flash the BIOS with an arbitrary image and potentially run malicious BIOS code.
CVSS Score: 6.7 (MEDIUM)
References: https://support.lenovo.com/us/en/product_security/LEN-15084; https://support.lenovo.com/us/en/product_security/LEN-15084
CVE: CVE-2017-9639
Published: 2017-07-17
Description: An issue was discovered in Fuji Electric V-Server Version 3.3.22.0 and prior. A memory corruption vulnerability has been identified (aka improper restriction of operations within the bounds of a memory buffer), which may allow remote code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-119, CWE-119
References: http://www.securityfocus.com/bid/99544; https://ics-cert.us-cert.gov/advisories/ICSA-17-192-02; http://www.securityfocus.com/bid/99544
CVE: CVE-2017-6736
Published: 2017-07-17
Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.
 The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.
 Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.
   There are workarounds that address these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808
CVE: CVE-2017-6737
Published: 2017-07-17
Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;



The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.



Only traffic directed to the affected system can be used to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808
CVE: CVE-2017-6738
Published: 2017-07-17
Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.
 The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.
 Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.
   There are workarounds that address these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808
CVE: CVE-2017-6739
Published: 2017-07-17
Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;



The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.



Only traffic directed to the affected system can be used to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808
CVE: CVE-2017-6740
Published: 2017-07-17
Description: The Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE Software contains multiple vulnerabilities that could allow an authenticated, remote attacker to remotely execute code on an affected system or cause an affected system to reload. An attacker could exploit these vulnerabilities by sending a crafted SNMP packet to an affected system via IPv4 or IPv6. Only traffic directed to an affected system can be used to exploit these vulnerabilities.
 The vulnerabilities are due to a buffer overflow condition in the SNMP subsystem of the affected software. The vulnerabilities affect all versions of SNMP - Versions 1, 2c, and 3. To exploit these vulnerabilities via SNMP Version 2c or earlier, the attacker must know the SNMP read-only community string for the affected system. To exploit these vulnerabilities via SNMP Version 3, the attacker must have user credentials for the affected system. A successful exploit could allow the attacker to execute arbitrary code and obtain full control of the affected system or cause the affected system to reload.
 Customers are advised to apply the workaround as contained in the Workarounds section below. Fixed software information is available via the Cisco IOS Software Checker. All devices that have enabled SNMP and have not explicitly excluded the affected MIBs or OIDs should be considered vulnerable.
   There are workarounds that address these vulnerabilities.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808
CVE: CVE-2017-6741
Published: 2017-07-17
Description: A vulnerability in the SNMP implementation of could allow an authenticated, remote attacker to cause a reload of the affected system or to remotely execute code. An attacker could exploit this vulnerability by sending a crafted SNMP packet to the affected device.&nbsp;



The vulnerability is due to a buffer overflow in the affected code area. The vulnerability affects all versions of SNMP (versions 1, 2c, and 3). The attacker must know the SNMP read only community string (SNMP version 2c or earlier) or the user credentials (SNMPv3). An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system.



Only traffic directed to the affected system can be used to exploit this vulnerability.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmp; http://www.securityfocus.com/bid/99345; http://www.securitytracker.com/id/1038808