CVE-2017-6666

Опубликовано: 13 июн. 2017

Источник: nvd

CVSS3: 6

CVSS2: 1.9

EPSS Низкий

Описание

A vulnerability in the forwarding component of Cisco IOS XR Software for Cisco Network Convergence System (NCS) 5500 Series Routers could allow an authenticated, local attacker to cause the router to stop forwarding data traffic across Traffic Engineering (TE) tunnels, resulting in a denial of service (DoS) condition. More Information: CSCvd16665. Known Affected Releases: 6.2.11.BASE. Known Fixed Releases: 6.1.3 6.1.2 6.3.1.8i.BASE 6.2.11.8i.BASE 6.2.2.9i.BASE 6.1.32.11i.BASE 6.1.31.10i.BASE 6.1.4.3i.BASE.

Ссылки

http://www.securityfocus.com/bid/98987
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038630
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs
Mitigation
Vendor Advisory
http://www.securityfocus.com/bid/98987
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1038630
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20170607-ncs
Mitigation
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:cisco:ios_xr:6.0.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.0.1:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.0_base:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.1.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.1.1:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.1.2:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.1.3:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.2.0:*:*:*:*:*:*:*

cpe:2.3:o:cisco:ios_xr:6.2.1:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00074

Низкий

6 Medium

CVSS3

1.9 Low

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-f277-hhxj-fvx5