Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Cisco Ios

CVE-2017-6736 CVE-2018-0296

githubexploit · 2018-01-22

Description

Exploit for memory buffer restriction issue in Cisco IOS SNMP with submod for reconnaissance.

Entry point

Parameterpath · path

Path/+CSCOU+/../+CSCOE+/files/file_list.json?path=/

Path traversal attempt via file_list.json path parameter to access restricted files.

Affected software

Cisco Ios≤ 12.4, 15.6

Cisco Ios Xe≤ 3.17

Cisco Adaptive Security Appliance Software< 9.1.7.29, 9.2.4.33, 9.4.4.18, 9.6.4.8, 9.7.1.24, 9.8.2.28, 9.9.2.1

All known vulnerabilities by product

Cisco Ios Cisco Ios Xe Cisco Asa Cisco Ftd

CVSS Score

9.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:LOW

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

82%confidence this exploit runs

Based on 4 file(s) in the source

EPSS Score

99.9%higher than 100.0% of all CVEs

Updated 2026-06-16

Exploit Details

Modified:2025-02-06 04:52

Last Seen:2025-08-31 22:54

Reporter:GarnetSunset

Repository:No longer on GitHub

Tags

cisco iosmemory buffersnmp exploitCVE-2017-6736CVE-2018-0296security vulnerabilities

Other exploits for the same CVE

Cisco ASA Directory Traversal

2024-09-01 Shelby Pace, Yassine Aboukir, Michał Bentkowski, metasploit.comPACKETSTORMRuby

Exploit for Improper Input Validation in Cisco Adaptive_Security_Appliance_Software

2020-09-28 3ndG4meGITHUB

Cisco Adaptive Security Appliance - Path Traversal Exploit

2019-08-12 Angelo RuwanthaZDTRuby

Cisco Adaptive Security Appliance - Path Traversal (Metasploit)

2019-08-12 Angelo RuwanthaEXPLOITPACKRuby

Cisco Adaptive Security Appliance - Path Traversal (Metasploit)

2019-08-12 Angelo RuwanthaEXPLOITDBRuby

Cisco Adaptive Security Appliance Path Traversal

2019-08-12 Angelo RuwanthaPACKETSTORMRuby

Cisco ASA Directory Traversal

2018-07-30 Michał Bentkowski, Yassine Aboukir, Shelby PaceMETASPLOITRuby

Cisco Adaptive Security Appliance Path Traversal Exploit

2018-07-24 Angelo RuwanthaZDTRuby

Exploit Code

README11 lines

## https://sploitus.com/exploit?id=15732697-7845-5166-9413-52F3531B3C92
# CiscoIOSSNMPToolkit

[![forthebadge](http://forthebadge.com/images/badges/made-with-crayons.svg)](http://forthebadge.com)

Cisco iOS SNMP Overflow Exploit Toolkit (CVE-2017-6736)

## CVE-2018-0296?

I have recently submodded CVE-2018-0296, which can be used in junction with this original exploit,
can be used to do reconnaissance and see what is contained in the appliance beforehand.