CVE-2017-6744 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS software that allows an authenticated remote attacker to execute code or cause the system to reload by sending a crafted SNMP packet over IPv4 or IPv6. This vulnerability has been exploited in the wild.
CVE-2017-6743 is a high-severity vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS and IOS XE software. It allows an authenticated remote attacker to execute arbitrary code on affected devices. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-6740 is a vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code or cause the system to reload. It has been exploited in the wild. The vulnerability is classified as high severity due to its potential impact on system availability and control.
CVE-2017-6739 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code or cause the system to reload. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2017-6738 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2017-6737 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-6736 is a high-severity vulnerability in the SNMP subsystem of Cisco IOS and IOS XE software that allows an authenticated remote attacker to execute code remotely. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-6663 is a denial-of-service vulnerability in the Autonomic Networking feature of Cisco IOS and IOS XE Software. An unauthenticated attacker adjacent to the network could exploit this flaw to cause affected autonomic nodes to reload, disrupting service availability. This vulnerability has been exploited in the wild.
CVE-2017-6627 is a denial-of-service vulnerability in the UDP packet processing code of Cisco IOS and IOS XE software. An unauthenticated remote attacker can exploit this flaw to cause the input queue to hold UDP packets, resulting in an interface queue wedge and denial of service. This vulnerability has been exploited in the wild.
CVE-2017-12319 is a vulnerability in Cisco IOS XE Software's Border Gateway Protocol (BGP) over Ethernet Virtual Private Network (EVPN) that allows an unauthenticated remote attacker to cause a device reload, leading to denial of service, or potentially corrupt the BGP routing table, causing network instability.
CVE-2017-12240 is a high-severity vulnerability in the DHCP relay subsystem of Cisco IOS and IOS XE Software. It allows an unauthenticated remote attacker to execute arbitrary code and gain full control over the affected system. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2017-12238 is a vulnerability in the Virtual Private LAN Service (VPLS) code of Cisco IOS for Catalyst 6800 Series Switches. It allows an unauthenticated, adjacent attacker to cause a denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the available data.
CVE-2017-12237 is a denial-of-service vulnerability in the Internet Key Exchange Version 2 (IKEv2) module of Cisco IOS and IOS XE software. An unauthenticated remote attacker can exploit this flaw to cause high CPU utilization, traceback messages, or device reloads, resulting in denial of service. This vulnerability has been exploited in the wild.
CVE-2017-12235 is a vulnerability in Cisco IOS software for Cisco Industrial Ethernet Switches affecting the PROFINET Discovery and Configuration Protocol (PN-DCP). An unauthenticated remote attacker can exploit this flaw to cause the device to reload, resulting in a denial of service. The vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2017-12234 is a vulnerability in Cisco IOS software's implementation of the Common Industrial Protocol (CIP) feature. An unauthenticated remote attacker can exploit this flaw to cause the affected device to reload, resulting in a denial of service condition. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-12233 is a vulnerability in Cisco IOS software's Common Industrial Protocol (CIP) feature that allows an unauthenticated remote attacker to cause the device to reload, resulting in a denial of service. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-12232 is a denial-of-service vulnerability in Cisco IOS software running on Cisco Integrated Services Routers Generation 2 (ISR G2). An unauthenticated attacker adjacent to the device can exploit a protocol implementation flaw to cause the router to reload, disrupting network availability. This vulnerability has been exploited in the wild.
CVE-2017-12231 is a vulnerability in Cisco IOS software's Network Address Translation (NAT) implementation that allows an unauthenticated remote attacker to cause a denial of service. This flaw affects Cisco IOS devices and has been exploited in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2017-11826 is a remote code execution vulnerability in Microsoft Office that occurs due to improper handling of objects in memory. Successful exploitation allows an attacker to execute arbitrary code with the privileges of the current user. This vulnerability has been exploited in the wild.
CVE-2017-11292 is a type confusion vulnerability in Adobe Flash Player that can lead to remote code execution. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the available data.