CVE-2017-6666

MEDIUM

Cisco IOS XR 6.2.11.BASE - Authenticated Denial of Service via Traffic Engineering Tunnel Forwarding

Title source: llm

Description

A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE.

References (3)

Core 3

Core References

Mitigation, Vendor Advisory x_refsource_confirm

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/98987

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id/1038630

Scores

CVSS v3 6.0

EPSS 0.0032

EPSS Percentile 24.6%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H

Details

Status published

Products (10)

cisco/ios_xr 6.0.0

cisco/ios_xr 6.0.1

cisco/ios_xr 6.0_base

cisco/ios_xr 6.1.0

cisco/ios_xr 6.1.1

cisco/ios_xr 6.1.2

cisco/ios_xr 6.1.3

cisco/ios_xr 6.2.0

cisco/ios_xr 6.2.1

n/a/Cisco Network Convergence System 5500 Series Routers Cisco Network Convergence System 5500 Series Routers

Published Jun 13, 2017

Tracked Since Feb 18, 2026