Glexia's TakeAutomated analysis
Security readout for executives and security teams
Plain-English summary
CVE-2017-6737 affects Cisco IOS devices using SNMP. An attacker with the SNMP community string or SNMPv3 credentials can send crafted SNMP traffic that may crash the device or gain full control. CISA lists this CVE in KEV, so unresolved exposure should be treated as urgent.
Executive priority
High priority. This is a remotely reachable network-device issue with potential full device compromise, availability impact, and KEV evidence of exploitation. Prioritize internet-facing or broadly reachable SNMP first.
Technical view
The vulnerability is a buffer overflow in Cisco IOS SNMP handling, classified as CWE-119. It affects SNMP versions 1, 2c, and 3. The CVSS v3.0 score is 8.8 with network attack vector, low complexity, low privileges, no user interaction, and high confidentiality, integrity, and availability impact.
Likely exposure
Exposure is most likely on legacy Cisco IOS devices with SNMP enabled and reachable by attackers who know a read-only community string or valid SNMPv3 credentials.
Exploitation context
Active exploitation is supported by CISA KEV listing. Sources state exploitation requires crafted SNMP traffic directed to the affected system and valid SNMP community or credential knowledge.
Researcher notes
Do not assume every Cisco device is affected; validate IOS version, SNMP configuration, and management-plane reachability. The provided sources do not include exploit details, only impact and prerequisites.
Mitigation direction
- Check Cisco advisory for affected releases and fixed Cisco IOS upgrade guidance.
- Prioritize upgrading or replacing exposed affected Cisco IOS devices.
- Restrict SNMP access to trusted management networks only.
- Disable SNMP where it is not operationally required.
- Rotate SNMP community strings or SNMPv3 credentials if exposure is suspected.
Validation and detection
- Inventory Cisco IOS devices and compare versions against the affected release list.
- Confirm whether SNMP is enabled and which versions are allowed.
- Verify SNMP is reachable only from approved management sources.
- Review logs for unexpected reloads or suspicious SNMP access attempts.
- Confirm remediation against Cisco advisory guidance.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-119: Exact CWE lookup
Use the exact CWE identifier as the starting point before reviewing related ATT&CK behavior. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2017-6737 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookupVulnerability profileCVE Program record
- Severity
- High
- CVSS
- 8.8 (3.0)
- Known Exploited
- Yes
- Published
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
1CVSS vectors
0Timeline events
0ADP providers
4Source links
CISA KEV status
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
ScoreVersionSeverityVectorExploitImpactSource
8.8CVSS 3.0High
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H2.85.9Primary CVE scoreVulnerability scoring details
Base CVSS 3.0 score
8.8HighVector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact
Source materials
- CVE List V5 sourceCVE List V5
- cisco-sa-20170629-snmpCVE reference
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170629-snmpCVE reference · x_refsource_CONFIRM, x_transferred
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2017-6737CVE reference · government-resource
Products and packages named in the record
VendorProductVersion / packageStatus
CiscoIOS12.1(3)XI, 12.2(4)B, 12.2(15)B, 12.2(16)B1, 12.2(4)B7, 12.2(4)B2, 12.2(16)B2, 12.2(4)B6, 12.2(4)B1, 12.2(4)B4, 12.2(4)B3, 12.2(4)B8, 12.2(4)B5, 12.2(16)B, 12.2(2)XA, 12.2(2)XA2, 12.2(2)XA3, 12.2(2)XA4, 12.2(2)XA5, 12.2(2)XA1, 12.2(2)XB11, 12.2(2)XB5, 12.2(2)XB2, 12.2(2)XB1, 12.2(2)XB10, 12.2(2)XB7, 12.2(2)XB3, 12.2(2)XB6, 12.2(2)XB14, 12.2(2)XB12, 12.2(2)XB15, 12.2(2)XB8, 12.2(2)XG, 12.2(4)XL, 12.2(4)XL5, 12.2(4)XL2, 12.2(4)XL6, 12.2(4)XL4, 12.2(4)XL1, 12.2(4)XL3, 12.2(4)XM, 12.2(4)XM3, 12.2(4)XM2, 12.2(4)XM4, 12.2(4)XM1, 12.2(3d), 12.2(5b), 12.2(1)XS1a, 12.2(2)XT, 12.2(2)XT2, 12.2(2)XT3, 12.2(4)XW, 12.2(4)YA, 12.2(4)YA6, 12.2(4)YA3, 12.2(4)YA4, 12.2(4)YA1, 12.2(4)YA11, 12.2(4)YA2, 12.2(4)YA9, 12.2(4)YA8, 12.2(4)YA12, 12.2(4)YA10, 12.2(4)YA7, 12.2(2)YC, 12.2(2)YC4, 12.2(2)YC1, 12.2(2)YC3, 12.2(2)YC2, 12.2(8)YD, 12.2(8)YD3, 12.2(8)YD2, 12.2(8)YD1, 12.2(4)YF, 12.2(4)YH, 12.2(2)XF2, 12.0(7)XK1, 12.0(7)XK, 12.2(2)DD2, 12.2(1)XD, 12.2(1)XD2, 12.2(1)XD4, 12.2(1)XD3, 12.2(1)XD1, 12.2(2)XH, 12.2(2)XH2, 12.2(2)XI, 12.2(2)XI1, 12.2(2)XI2, 12.2(2)XJ, 12.2(2)XK, 12.2(2)XK3, 12.2(2)XK2, 12.2(2)XQ, 12.2(2)XQ1, 12.2(4)BW, 12.2(4)BW1a, 12.2(4)BW2, 12.2(4)BW1, 12.2(2)BX, 12.2(2)BX1, 12.2(15)BZ2, 12.2(2)DX3, 12.2(15)MC1c, 12.2(15)MC1b, 12.2(15)MC1a, 12.2(2)XU, 12.2(8)YJ, 12.2(8)YJ1, 12.2(11)YT, 12.2(11)YT1, 12.2(11)YT2, 12.2(8)YN, 12.2(8)YN1, 12.2(9)YO, 12.2(9)YO3, 12.2(9)YO2, 12.2(9)YO1, 12.2(9)YO4, 12.2(1a)XC, 12.2(2)XC, 12.2(1a)XC1, 12.2(1a)XC3, 12.2(2)XC1, 12.2(1a)XC2, 12.2(2)XC2, 12.2(11)YP3, 12.2(8)YL, 12.2(8)YM, 12.2(11)YU, 12.2(11)YV, 12.2(8)YW2, 12.2(8)YW, 12.2(8)YW3, 12.2(8)YW1, 12.2(8)YY, 12.2(8)YY4, 12.2(8)YY3, 12.2(8)YY2, 12.2(8)YY1, 12.2(8)ZB3, 12.2(8)ZB2, 12.2(8)ZB7, 12.2(8)ZB6, 12.2(8)ZB4, 12.2(8)ZB8, 12.2(8)ZB1, 12.2(8)ZB4a, 12.2(8)ZB5, 12.2(11)ZC, 12.2(13)ZC, 12.2(13)ZD, 12.2(13)ZD3, 12.2(13)ZD2, 12.2(13)ZD1, 12.2(13)ZD4, 12.2(13)ZE, 12.2(13)ZF, 12.2(13)ZF2, 12.2(13)ZF1, 12.2(13)ZH, 12.2(13)ZH5, 12.2(13)ZH9, 12.2(13)ZH2, 12.2(13)ZH8, 12.2(13)ZH10, 12.2(13)ZH4, 12.2(13)ZH3, 12.2(13)ZH7, 12.2(13)ZH6, 12.2(15)ZJ, 12.2(15)ZJ2, 12.2(15)ZJ1, 12.2(15)ZJ3, 12.2(15)ZJ5, 12.2(15)ZL, 12.2(15)ZL1, 12.3(9a), 12.3(15), 12.3(19), 12.3(10f), 12.3(10a), 12.3(1), 12.3(1a), 12.3(10), 12.3(10b), 12.3(10c), 12.3(10d), 12.3(10e), 12.3(12b), 12.3(12a), 12.3(12c), 12.3(12d), 12.3(12e), 12.3(12), 12.3(13), 12.3(13a), 12.3(13b), 12.3(15a), 12.3(16), 12.3(17), 12.3(17a), 12.3(17b), 12.3(18), 12.3(20), 12.3(3f), 12.3(3e), 12.3(3g), 12.3(3c), 12.3(3b), 12.3(3a), 12.3(3), 12.3(3i), 12.3(3h), 12.3(5c), 12.3(5b), 12.3(5a), 12.3(5), 12.3(5f), 12.3(5e), 12.3(5d), 12.3(6f), 12.3(6e), 12.3(6c), 12.3(6b), 12.3(6a), 12.3(6), 12.3(9d), 12.3(9e), 12.3(9), 12.3(9b), 12.3(9c), 12.3(16a), 12.3(15b), 12.3(21), 12.3(22), 12.3(21b), 12.3(23), 12.3(26), 12.3(20a), 12.3(22a), 12.3(25), 12.3(17c), 12.3(24), 12.3(19a), 12.3(24a), 12.3(18a), 12.3(1a)B, 12.3(3)B, 12.3(5a)B, 12.3(3)B1, 12.3(5a)B3, 12.3(5a)B2, 12.3(5a)B5, 12.3(5a)B4, 12.3(5a)B1, 12.3(11)T, 12.3(7)T12, 12.3(11)T11, 12.3(11)T10, 12.3(14)T7, 12.3(14)T, 12.3(8)T, 12.3(2)T, 12.3(4)T, 12.3(7)T, 12.3(8)T9, 12.3(2)T9, 12.3(8)T6, 12.3(4)T2a, 12.3(4)T9, 12.3(4)T4, 12.3(2)T1, 12.3(11)T5, 12.3(7)T3, 12.3(2)T2, 12.3(8)T3, 12.3(4)T7, 12.3(8)T7, 12.3(11)T8, 12.3(7)T2, 12.3(8)T4, 12.3(8)T8, 12.3(14)T5, 12.3(11)T3, 12.3(4)T10, 12.3(2)T4, 12.3(8)T10, 12.3(14)T2, 12.3(4)T2, 12.3(7)T7, 12.3(7)T10, 12.3(7)T4, 12.3(11)T6, 12.3(7)T11, 12.3(4)T6, 12.3(2)T3, 12.3(2)T5, 12.3(2)T6, 12.3(4)T3, 12.3(14)T3, 12.3(2)T8, 12.3(11)T4, 12.3(7)T9, 12.3(8)T11, 12.3(11)T9, 12.3(7)T8, 12.3(4)T1, 12.3(8)T5, 12.3(4)T11, 12.3(4)T8, 12.3(14)T1, 12.3(11)T2, 12.3(7)T6, 12.3(2)T7, 12.3(11)T7, 12.3(7)T1, 12.3(14)T6, 12.3(8)T1, 12.2(15)CZ, 12.2(15)CZ1, 12.2(15)CZ3, 12.2(15)CZ2, 12.2(13)ZP, 12.2(13)ZP1, 12.2(13)ZP3, 12.2(13)ZP2, 12.2(13)ZP4, 12.3(2)XA, 12.3(2)XA1, 12.3(4)XQ, 12.3(4)XQ1, 12.3(11)XL, 12.3(11)XL1, 12.3(4)XK3, 12.3(4)XK1, 12.3(4)XK4, 12.3(4)XK, 12.3(4)XK2, 12.3(7)XJ, 12.3(7)XJ1, 12.3(7)XJ2, 12.3(7)XI7, 12.3(7)XI1, 12.3(7)XI1b, 12.3(7)XI7a, 12.3(7)XI2a, 12.3(7)XI1c, 12.3(7)XI3, 12.3(7)XI6, 12.3(7)XI8c, 12.3(7)XI2, 12.3(7)XI5, 12.3(4)XG, 12.3(4)XG3, 12.3(4)XG1, 12.3(4)XG4, 12.3(4)XG2, 12.3(4)XG5, 12.3(2)XF, 12.3(2)XE, 12.3(2)XE1, 12.3(4)XD, 12.3(4)XD4, 12.3(4)XD1, 12.3(4)XD3, 12.3(4)XD2, 12.3(2)XC, 12.3(2)XC2, 12.3(2)XC1, 12.3(2)XB2, 12.3(2)XB, 12.3(2)XB3, 12.3(2)XB1, 12.2(25)SE2, 12.2(29)SV2, 12.3(7)XR, 12.3(7)XR4, 12.3(7)XR3, 12.3(7)XR5, 12.3(7)XR6, 12.3(7)XR7, 12.3(8)XU5, 12.3(8)XU2, 12.3(8)XU4, 12.3(8)XU3, 12.3(8)XX, 12.3(8)XX1, 12.3(8)XW, 12.3(8)XW2, 12.3(8)XW3, 12.3(8)XW1, 12.3(8)XY, 12.3(8)XY3, 12.3(8)XY5, 12.3(8)XY4, 12.3(8)XY1, 12.3(8)XY7, 12.3(8)XY2, 12.3(8)XY6, 12.3(2)XZ1, 12.3(2)XZ2, 12.3(11)YF, 12.3(11)YF2, 12.3(11)YF3, 12.3(11)YF4, 12.3(11)YF1, 12.3(8)YG, 12.3(8)YG3, 12.3(8)YG2, 12.3(8)YG4, 12.2(12b)M1, 12.2(12h)M1, 12.2(8)BY, 12.2(8)BY1, 12.2(8)BY2, 12.2(4)XV, 12.2(4)XV1, 12.2(4)XV2, 12.2(4)XV4, 12.2(4)XV4a, 12.2(4)XV3, 12.2(4)XV5, 12.3(11)YK, 12.3(11)YK1, 12.3(11)YK2, 12.2(18)SO1, 12.2(18)SO3, 12.2(18)SO2, 12.3(2)JA3, 12.3(2)JA4, 12.3(11)JA3, 12.3(11)JA2, 12.3(14)YQ8, 12.3(14)YQ, 12.3(14)YQ5, 12.3(14)YQ4, 12.3(14)YQ7, 12.3(14)YQ1, 12.3(14)YQ6, 12.3(14)YQ3, 12.3(14)YQ2, 12.4(3e), 12.4(7b), 12.4(8), 12.4(5b), 12.4(7a), 12.4(3d), 12.4(1), 12.4(1a), 12.4(1b), 12.4(1c), 12.4(10), 12.4(3), 12.4(3a), 12.4(3b), 12.4(3c), 12.4(3f), 12.4(5), 12.4(5a), 12.4(7c), 12.4(7), 12.4(8a), 12.4(8b), 12.4(7d), 12.4(3g), 12.4(8c), 12.4(10b), 12.4(12), 12.4(12a), 12.4(12b), 12.4(13), 12.4(13a), 12.4(13b), 12.4(13c), 12.4(7e), 12.4(17), 12.4(25e), 12.4(18b), 12.4(18e), 12.4(25g), 12.4(3i), 12.4(3j), 12.4(23b), 12.4(3h), 12.4(7h), 12.4(25a), 12.4(16), 12.4(13d), 12.4(25), 12.4(25c), 12.4(19), 12.4(13e), 12.4(25b), 12.4(23), 12.4(10c), 12.4(21), 12.4(16b), 12.4(19b), 12.4(16a), 12.4(23a), 12.4(25d), 12.4(7f), 12.4(18), 12.4(21a), 12.4(13f), 12.4(25f), 12.4(18c), 12.4(5c), 12.4(8d), 12.4(12c), 12.4(17a), 12.4(18a), 12.4(17b), 12.4(7g), 12.2(60)EZ16, 12.3(8)JK, 12.3(14)YU, 12.3(14)YU1, 12.4(6)MR1, 12.4(11)MR, 12.4(2)MR, 12.4(4)MR, 12.4(6)MR, 12.4(9)MR, 12.4(12)MR, 12.4(16)MR, 12.4(16)MR1, 12.4(19)MR2, 12.4(19)MR1, 12.4(19)MR, 12.4(20)MR, 12.4(4)MR1, 12.4(19)MR3, 12.4(12)MR1, 12.4(20)MR2, 12.4(16)MR2, 12.4(12)MR2, 12.4(2)MR1, 12.4(20)MR1, 12.4(4)T, 12.4(4)T1, 12.4(4)T2, 12.4(4)T3, 12.4(6)T, 12.4(6)T1, 12.4(6)T2, 12.4(9)T, 12.4(4)T4, 12.4(2)T5, 12.4(6)T3, 12.4(2)T, 12.4(11)T, 12.4(15)T, 12.4(20)T, 12.4(24)T, 12.4(24)T3, 12.4(4)T8, 12.4(20)T1, 12.4(22)T1, 12.4(15)T9, 12.4(11)T4, 12.4(15)T8, 12.4(6)T5, 12.4(15)T15, 12.4(24)T5, 12.4(15)T2, 12.4(6)T8, 12.4(15)T12, 12.4(24)T4, 12.4(6)T11, 12.4(9)T5, 12.4(20)T3, 12.4(6)T4, 12.4(4)T6, 12.4(22)T, 12.4(20)T6, 12.4(9)T3, 12.4(24)T8, 12.4(6)T7, 12.4(15)T13, 12.4(6)T10, 12.4(15)T3, 12.4(24)T2, 12.4(22)T5, 12.4(2)T3, 12.4(15)T10, 12.4(22)T4, 12.4(20)T5, 12.4(9)T6, 12.4(15)T4, 12.4(2)T4, 12.4(24)T1, 12.4(9)T4, 12.4(24)T7, 12.4(22)T3, 12.4(9)T1, 12.4(24)T6, 12.4(6)T9, 12.4(15)T5, 12.4(4)T7, 12.4(20)T2, 12.4(2)T1, 12.4(11)T1, 12.4(15)T11, 12.4(2)T6, 12.4(2)T2, 12.4(15)T7, 12.4(11)T2, 12.4(9)T7, 12.4(15)T14, 12.4(11)T3, 12.4(15)T6, 12.4(15)T16, 12.4(15)T1, 12.4(9)T2, 12.4(6)T6, 12.4(22)T2, 12.4(4)T5, 12.4(20)T4, 12.4(15)T17, 12.3(14)YT, 12.3(14)YT1, 12.2(8)TPC10a, 12.2(8)TPC10b, 12.2(8)TPC10c, 12.3(7)JX2, 12.3(7)JX, 12.3(7)JX1, 12.3(7)JX4, 12.3(11)JX, 12.3(7)JX7, 12.3(7)JX12, 12.3(7)JX9, 12.3(7)JX10, 12.3(11)JX1, 12.3(7)JX6, 12.3(7)JX5, 12.3(7)JX3, 12.3(7)JX11, 12.3(7)JX8, 12.4(2)XB, 12.4(2)XB1, 12.4(2)XB6, 12.4(2)XB7, 12.4(2)XB11, 12.4(2)XB3, 12.4(2)XB9, 12.4(2)XB8, 12.4(2)XB2, 12.4(2)XB10, 12.4(2)XB4, 12.4(2)XB5, 12.4(2)XA, 12.4(2)XA1, 12.4(2)XA2, 12.3(14)YM8, 12.3(14)YM12, 12.3(14)YM4, 12.3(14)YM3, 12.3(14)YM7, 12.3(14)YM11, 12.3(14)YM9, 12.3(14)YM6, 12.3(14)YM10, 12.3(14)YM13, 12.3(14)YM5, 12.3(14)YM2, 12.2(28)ZX, 12.4(4)XC, 12.4(4)XC1, 12.4(4)XC5, 12.4(4)XC7, 12.4(4)XC3, 12.4(4)XC4, 12.4(4)XC2, 12.4(4)XC6, 12.4(4)XD, 12.4(4)XD4, 12.4(4)XD10, 12.4(4)XD12, 12.4(4)XD2, 12.4(4)XD8, 12.4(4)XD11, 12.4(4)XD1, 12.4(4)XD5, 12.4(4)XD7, 12.4(4)XD9, 12.4(6)XE, 12.4(6)XE2, 12.4(6)XE1, 12.3(11)YZ1, 12.3(11)YZ, 12.3(11)YZ2, 12.4(11)XJ, 12.4(11)XJ3, 12.4(11)XJ2, 12.4(11)XJ4, 12.4(6)XT, 12.4(6)XT1, 12.4(6)XT2, 12.4(6)XP, 12.4(11)MD2, 12.4(11)XV, 12.4(11)XV1, 12.4(11)XW, 12.4(11)XW3, 12.4(11)XW7, 12.4(11)XW10, 12.4(11)XW8, 12.4(11)XW9, 12.4(11)XW6, 12.4(11)XW4, 12.4(11)XW1, 12.4(11)XW5, 12.4(11)XW2, 12.4(3g)JMA1, 12.4(15)XY4, 12.4(15)XY5, 12.4(15)XY1, 12.4(15)XY, 12.4(15)XY2, 12.4(15)XY3, 12.4(15)XZ, 12.4(15)XZ2, 12.4(15)XZ1, 12.4(15)XL3, 12.4(15)XL1, 12.4(15)XL2, 12.4(15)XL4, 12.4(15)XL5, 12.4(15)XL, 12.3(8)ZA, 12.4(15)XM1, 12.4(15)XM2, 12.2(33)STE0, 12.4(10b)JDA1, 12.4(3g)JMB, 12.4(23c)JY, 12.4(10b)JDC, 12.4(10b)JDD, 15.0(1)M1, 15.0(1)M5, 15.0(1)M4, 15.0(1)M3, 15.0(1)M2, 15.0(1)M6, 15.0(1)M, 15.0(1)M7, 15.0(1)M10, 15.0(1)M9, 15.0(1)M8, 15.0(1)XA2, 15.0(1)XA4, 15.0(1)XA1, 15.0(1)XA3, 15.0(1)XA, 15.0(1)XA5, 15.1(2)T, 15.1(1)T4, 15.1(3)T2, 15.1(1)T1, 15.1(2)T0a, 15.1(3)T3, 15.1(1)T3, 15.1(2)T3, 15.1(2)T4, 15.1(1)T2, 15.1(3)T, 15.1(2)T2a, 15.1(3)T1, 15.1(1)T, 15.1(2)T2, 15.1(2)T1, 15.1(2)T5, 15.1(3)T4, 15.1(1)T5, 15.1(1)XB, 15.0(1)XO1, 15.0(1)XO, 15.0(2)XO, 15.3(1)T, 15.3(2)T, 15.3(1)T1, 15.3(1)T2, 15.3(1)T3, 15.3(1)T4, 15.3(2)T1, 15.3(2)T2, 15.3(2)T3, 15.3(2)T4, 12.4(10b)JDE, 15.0(1)EY, 15.0(1)EY1, 15.0(1)EY2, 12.4(20)MRB, 12.4(20)MRB1, 15.1(4)M3, 15.1(4)M, 15.1(4)M1, 15.1(4)M2, 15.1(4)M6, 15.1(4)M5, 15.1(4)M4, 15.1(4)M7, 15.1(4)M3a, 15.1(4)M10, 15.1(4)M8, 15.1(4)M9, 12.4(3g)JMC1, 12.4(3g)JMC, 12.4(3g)JMC2, 15.0(2)SE8, 15.1(2)GC, 15.1(2)GC1, 15.1(2)GC2, 15.1(4)GC, 15.1(4)GC1, 15.1(4)GC2, 15.2(4)M, 15.2(4)M1, 15.2(4)M2, 15.2(4)M4, 15.2(4)M3, 15.2(4)M5, 15.2(4)M8, 15.2(4)M10, 15.2(4)M7, 15.2(4)M6, 15.2(4)M9, 15.2(4)M6a, 15.2(4)M11, 15.0(2)SG11a, 12.4(21a)JHC, 15.0(1)EX, 15.0(2)EX2, 15.0(2)EX8, 15.0(2)EX10, 15.0(2)EX11, 15.0(2)EX13, 15.0(2)EX12, 15.2(1)GC, 15.2(1)GC1, 15.2(1)GC2, 15.2(2)GC, 15.2(3)GC, 15.2(3)GC1, 15.2(4)GC, 15.2(4)GC1, 15.2(4)GC2, 15.2(4)GC3, 15.4(1)T, 15.4(2)T, 15.4(1)T2, 15.4(1)T1, 15.4(1)T3, 15.4(2)T1, 15.4(2)T3, 15.4(2)T2, 15.4(1)T4, 15.4(2)T4, 15.2(2a)E2, 15.2(3a)E, 15.2(3)E4, 15.2(2)E5b, 15.2(6a)E, 15.2(6)E0c, 15.2(7a)E0b, 15.2(7b)E0b, 15.1(3)MRA3, 15.1(3)MRA4, 15.1(3)SVB1, 15.1(3)SVB2, 15.4(2)S3, 15.3(3)M, 15.3(3)M1, 15.3(3)M2, 15.3(3)M3, 15.3(3)M5, 15.3(3)M4, 15.3(3)M6, 15.3(3)M7, 15.3(3)M8, 15.3(3)M9, 15.3(3)M8a, 15.2(4)JN, 15.1(3)SVD, 15.1(3)SVD1, 15.1(3)SVD2, 15.1(3)SVF, 15.1(3)SVF1, 15.1(3)SVE, 15.2(4)JAZ1, 15.4(1)CG, 15.4(2)CG, 15.1(3)SVG, 15.5(1)T, 15.5(1)T1, 15.5(2)T, 15.5(1)T2, 15.5(1)T3, 15.5(2)T1, 15.5(2)T2, 15.5(2)T3, 15.5(2)T4, 15.5(1)T4, 15.2(4)EA10, 15.5(3)M, 15.5(3)M1, 15.5(3)M2, 15.5(3)M3, 15.5(3)M4, 15.5(3)M4a, 15.5(3)M5, 15.3(3)JAA1, 15.0(2)SQD, 15.0(2)SQD1, 15.0(2)SQD2, 15.0(2)SQD3, 15.0(2)SQD4, 15.0(2)SQD5, 15.0(2)SQD6, 15.0(2)SQD7, 15.0(2)SQD8, 15.6(2)S0a, 15.6(1)T, 15.6(2)T, 15.6(1)T0a, 15.6(1)T1, 15.6(2)T1, 15.6(1)T2, 15.6(2)T2, 15.6(1)T3, 15.6(3)M, 15.6(3)M1, 15.6(3)M0a, 15.6(3)M1b, 15.6(3)M2, 15.6(3)M2a, 15.1(3)SVJ2, 15.3(3)JPC5, 15.3(3)JPR1Listed
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Restriction of Operations within the Bounds of a Memory Buffer
Improper Restriction of Operations within the Bounds of a Memory Buffer represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.